Dhaka Technologies Limited Company | Contract
Solution Architect Lead – D365, Power Platform, and Azure
Washington, United States | Posted on 08/05/2026
JobTitle: Solution Architect Lead – D365, Power Platform, and Azure
WorkArrangement: Hybrid
Location: Washington, DC (20003)
EmploymentType: Contract
EngagementType: W2 or 1099 only (no C2C)
Position Summary
Dhaka Technologies Limited Company is hiring a Solution Architect Leadfor a DC Government client. The agency requires a senior, deeply hands-onSolution Architect resource to serve as the technical design authority forSTAAND (Stronger Together Against Abuse and Neglect in DC), the District’sfederally certified Comprehensive Child Welfare Information System (CCWIS).
STAAND is a person-centric, AI-enabled platform built on MicrosoftDynamics 365 and the Power Platform hosted in a Government Community Cloud(GCC) tenant, with Azure services operating in Microsoft’s commercial cloud. Itsupports agency social workers, supervisors, private agency partners,providers, resource parents, and District sister agencies across ninefunctional modules, namely Intake and Investigations, Case Management, ICPC,Finance (Contracts, Service Logs, and Fiscal), Provider, Eligibility and Subsidy,Placement, Services, and Management Reports, plus six external portals(Mandated Reporter, MPD, NYTD, OSSE, Resource Parent, and Community). STAANDalso fields CORA, an AI assistant supporting natural-language search andAI-assisted contact notes among other use cases.
The Resource will own architecture, security design, AI engineering, andthe platform-release change cadence required to keep STAAND current andimproving. This is a build-and-design role, not an advisory or oversight role.The Resource is expected to personally configure, code, prototype, review, andtroubleshoot in the platform while serving as the credible technical voice toagency executive leadership, the STAAND Product Team, the Office of the ChiefTechnology Officer (OCTO), Microsoft, and Federal Partners (ACF and theChildren’s Bureau).
The Resource will work under the direct supervision of the DistrictDevOps Manager.
Scope of Work and Responsibilities
3.1 Solution and PlatformArchitecture
- Own and maintain the authoritative STAAND architecture: logicaland physical data models, Dataverse table and relationship design, solutionsegmentation, environment strategy, and integration topology.
- Establish and enforce architecture standards, design patterns,naming conventions, and technical debt registers across all modules andportals.
- Chair design authority review for significant changes and signoff on solution designs before build.
- Diagnose deep platform issues: performance degradation, API andservice-protection limits, plug-in execution ordering, solution layeringconflicts, storage growth, and portal rendering.
- Maintain architecture artifacts sufficient to satisfy CCWISreview, federal audit, and District IT governance.
3.2 Cross-Cloud Architecture:GCC and Commercial Azure
- Design, document, and harden the boundary between the GCCDynamics and Power Platform tenant and Azure commercial-cloud services.
- Define what data may traverse that boundary, in what form(de-identified, tokenized, aggregated, or full record), under whatauthorization, and with what logging, including explicit architecturalboundaries for protected data categories such as Medicaid Enrollment.
- Implement cross-tenant identity, managed identities, serviceprincipals, Key Vault secret lifecycle, private networking, and API gatewaypatterns.
- Maintain a defensible position on data residency and FedRAMPauthorization boundaries for every commercial-cloud service in use, and presentthat position to auditors and federal reviewers.
3.3 AI and Agentic Development
- Serve as hands-on technical lead for the agency AI capability,including CORA and its expansion into agentic workflows.
- Design, build, evaluate, and productionize agents in Azure AIFoundry and Copilot Studio: tool and function calling, orchestration andmulti-agent patterns, grounding and retrieval over Dataverse and documentstores, prompt and context engineering, structured output, andhuman-in-the-loop checkpoints.
- Own AI evaluation discipline: golden datasets, automatedevaluations, groundedness and hallucination measurement, regression testing onmodel or prompt changes, latency and cost benchmarking, and controlled rollout.
- Manage the AI model lifecycle by tracking model releases anddeprecations, running comparative evaluation before adopting a new model, andexecuting migrations without regression to worker-facing quality.
- Implement responsible AI controls appropriate to a child welfaresetting: content safety, PII and PHI handling, bias and fairness testing,explainability, audit logging of AI-influenced actions, and clear framing of AIoutput as decision support rather than decision making.
- Support predictive and analytic capability aligned to agencymission priorities, ensuring models are validated, monitored for drift, andgoverned.
- Build reusable AI platform assets, including prompt libraries,agent templates, evaluation harnesses, and observability dashboards.
3.4 Application and PlatformSecurity
- Own the security architecture of STAAND end to end and serve astechnical counterpart to the agency Information System Security Officer (ISSO),OCTO security, and District privacy officials.
- Apply and evidence compliance with OCTO IT policies(octo.dc.gov/page/it-policies), NIST SP 800-53, FISMA, FedRAMP, HIPAA, 45 CFR1355 (CCWIS), Title IV-E confidentiality, and District data protection lawincluding DC Code Section 28-3851 et seq. breach notification obligations.
- Design and enforce least privilege: Dataverse business unit androle architecture, row-level and column-level security, portal web roles andtable permissions, privileged access management, and separation of duties forfinance and eligibility functions.
- Lead secure SDLC: threat modeling, secure code review, staticand dynamic analysis, dependency and supply-chain scanning, secrets management,and remediation tracking with severity-based SLAs.
- Support penetration tests, vulnerability assessments, and auditresponse, and own STAAND-assigned POA&M items.
- Define AI-specific security requirements: prompt injectiondefenses, tool-permission scoping, data exfiltration prevention, and agentaction auditing.
- Contribute to incident response, continuity, and disasterrecovery planning, and validate RTO and RPO through periodic exercises.
3.5 Continuous Improvement andRelease Management
- Own the STAAND change pipeline from enhancement request throughdesign, build, test, release, and post-release verification, includingpublished release notes and coordination with the CISA training organization.
- Plan and execute against the Microsoft Dynamics 365 biannualrelease waves and Power Platform service updates: early-access testing in adedicated environment, deprecation and breaking-change assessment, and adocumented impact and remediation plan per wave.
- Evaluate new platform, Azure, and AI capabilities against theSTAAND roadmap, run structured proofs of concept, and make evidence-basedadopt, trial, hold, or retire recommendations.
- Maintain a rolling multi-year technical roadmap balancingstabilization, platform health, security, federal compliance, and innovation.
- Drive performance, reliability, and cost optimization acrosscapacity and license consumption, Azure spend, storage tiering, and APIefficiency.
- Advance DevOps maturity: source-controlled solutions, automatedbuild and deploy pipelines, environment refresh, automated regression testing,and release quality metrics.
- Maintain and report the technical issues and risk register withmitigation owners and timelines.
3.6 Data, Interoperability, andFederal Reporting
- Own the data architecture supporting AFCARS, NCANDS, NYTD, CFSR,and Title IV-E reporting, including lineage, quality rules, exception handling,and submission validation.
- Design and maintain bi-directional exchanges with District andexternal partners consistent with CCWIS interoperability requirements.
- Establish automated data quality controls, duplicate persondetection and merge integrity, and reconciliation with legacy records.
3.7 Stakeholder and SeniorLeadership Engagement
- Translate between social work practice and technicalarchitecture, and observe real workflow with intake workers, investigators,case managers, placement staff, and fiscal teams before designing for it.
- Brief the agency IT Steering Committee members, CIO, STAANDProduct Leadership, OCTO leadership, Council oversight staff, court monitors,and ACF and Children’s Bureau reviewers, calibrating to each audience.
- Serve as principal technical liaison to Microsoft (IndustrySolutions Delivery, Customer Success, and product groups) and to implementationand support vendors, holding them to architectural and quality standards.
- Author decision memos, architecture decision records, briefingdecks, and federal reporting content requiring minimal editing.
- Mentor agency staff and other contract resources, build internalcapability, and reduce single-point-of-failure dependency.
Requirements
Required and Desired Skills Matrix
- 1. Bachelor’s degree in Computer Science, Software Engineering,Information Systems, Data Science, or a closely related technical disciplinefrom an accredited institution. Required, 20 years.
- 2. Dynamics 365 Customer Service (MB-230). Required.
- 4. Microsoft Dynamics 365 CE, Dataverse, and Power Platform,hands-on. Required.
- 5. Microsoft Certified: Azure Solutions Architect Expert (AZ-305).Required.
- 7. TOGAF 9 or 10 Certified. Desired.
- 9. Microsoft Certified: Azure Security Engineer Associate (AZ-500).Desired.
- 10. CISSP or CCSP (ISC2). Desired.
- 11. Microsoft Certified: Cybersecurity Architect Expert (SC-100).Desired.
- 13. Progressive IT experience. Required, 16 years.
- 14. Solution or enterprise architecture on enterprise-scale,mission-critical systems. Required, 8 years.
- 15. Lead or principal architect on full D365 implementationlifecycles, minimum two lifecycles. Required, 5 years.
- 16. Microsoft Azure architecture and hands-on build, including PaaSintegration, data, and identity. Required, 4 years.
- 17. Generative AI and agentic development in production using AzureAI Foundry, Azure OpenAI, or Copilot Studio. Required, 2 years.
- 18. RAG and grounding, tool calling, agent orchestration, and AIevaluation methodology. Required, 2 years.
- 19. Application security in a regulated environment, including NIST800-53 or equivalent, threat modeling, and secure SDLC. Required, 5 years.
- 20. Government cloud delivery in GCC, GCC High, or Azure Government.Required, 2 years.
- 21. Pro-code D365 extensibility, including C# and .NET plug-ins,custom APIs, and PCF controls. Required, 5 years.
- 22. Cross-cloud or cross-tenant architecture between government andcommercial clouds. Required, 2 years.
- 23. Power Platform ALM, solution layering, and Azure DevOps CI/CD.Required, 4 years.
- 24. Operating a live production system through vendor platformrelease waves without disruption. Required, 3 years.
- 25. Direct briefing of executive and non-technical programleadership. Required, 5 years.
- 26. Health and Human Services domain experience in child welfare(CCWIS or SACWIS), Medicaid and MMIS, integrated eligibility, behavioralhealth, or public health systems. Desired, 3 years.
- 27. Federal child welfare reporting, including AFCARS, NCANDS, NYTD,CFSR, and Title IV-E. Desired, 2 years.
- 28. Power Pages and portal architecture with external-user security.Desired, 3 years.
- 29. Data engineering and BI using Fabric, Synapse, Data Factory, andPower BI. Desired, 3 years.
- 30. Public sector or District government delivery experience.Desired, 2 years.
- 31. Mentoring and capability transfer to government staff. Desired,3 years.