Senior DoD Azure Cloud Architect — Identity & Hybrid

Global-Enterprise-Services,-LL; Fort Belvoir (VA); On-site; USD 160,000 - 175,000; Full time

Job summary

Global-Enterprise-Services,-LL is seeking a Hybrid Multi-Cloud Engineer SME to design, implement, and sustain secure Microsoft Azure cloud solutions for DoD missions from Fort Belvoir. You will translate complex requirements into scalable architectures while hands-on coding across IaC, Identity, and networking domains.

The role requires Top Secret clearance with SCI eligibility and experience with Entra ID governance, zero-trust principles, and RMF/STIG compliance in classified environments.

Qualifications

• Active Top Secret clearance with SCI eligibility.
• Bachelor's degree or Master’s with extensive DoD cloud experience.
• Microsoft Certified: Azure Solutions Architect Expert is required.
• Minimum five years designing and implementing Azure enterprise cloud solutions.
• Experience architecting hybrid Azure environments with on‑prem infrastructure.
• Experience with Entra ID governance and hybrid identity management.
• Knowledge of RMF, STIGs, and DoD cybersecurity requirements.

Responsibilities

• Architect, design, engineer, and implement secure Azure cloud solutions for DoD missions.
• Design and deploy green-field Azure environments and hybrid architectures.
• Implement enterprise identity solutions using Entra ID, Entra Connect, and Active Directory.
• Engineer IAM, PAM, and zero-trust controls across cloud resources.
• Develop Azure Landing Zones, CAF, and Well-Architected Framework compliant designs.
• Create IaC with Terraform, Bicep, or ARM templates and automate deployments.
• Configure secure networking with Virtual Networks, ExpressRoute, and firewalls.
• Maintain monitoring, backup, DR, governance, and security tooling in Azure.
• Contribute to ATO activities and ensure RMF/STIG compliance.
• Produce architecture diagrams, SOPs, and technical documentation.

Skills

Azure architecture

Hybrid cloud engineering

Identity management

Just-in-time access (JIT)

PIM & access governance

DoD cybersecurity

Terraform

Bicep/ARM Templates

Azure Entra ID

Azure networking

Education

Bachelor's degree in CS/IS/Engineering

Master's degree (optional)

Doctorate (optional)

Tools

Terraform

Azure CLI

PowerShell

Python

Azure Bicep

ARM Templates

Job description

Global-Enterprise-Services,-LL is seeking a Hybrid Multi-Cloud Engineer SME to design, implement, and sustain secure Microsoft Azure cloud solutions for DoD missions from Fort Belvoir. You will translate complex requirements into scalable architectures while hands-on coding across IaC, Identity, and networking domains.

The role requires Top Secret clearance with SCI eligibility and experience with Entra ID governance, zero-trust principles, and RMF/STIG compliance in classified environments.