DevSecOps & Azure Architect - CTJ - TS/SCI

Microsoft · Springfield · $101,800–$193,800 (stated in the posting)

Apply on the company website

We are seeking a DevSecOps & Azure Architect - CTJ - TS/SCI to join Microsoft Federal and lead the design and delivery of secure, scalable, cloud-first solutions for U.S. Government customers. 

Microsoft Federal was established to address the unique mission, compliance, security, and procurement requirements of the United States Government (USG). Our architects partner with federal agencies to define technical strategy, modernize enterprise platforms, and accelerate mission outcomes within highly regulated environments. 

As a DevSecOps & Azure Architect, you will serve as a trusted technical advisor responsible for shaping cloud adoption strategies, architecting enterprise-scale platforms, and leading DevSecOps transformation initiatives. You will work across customer, engineering, cybersecurity, and operations teams to design secure Azure-based solutions that enable mission-critical workloads, platform services, and software delivery pipelines. 

This role requires a strong blend of architecture, consulting, engineering leadership, and customer engagement experience. You will be expected to provide technical direction across cloud infrastructure, platform engineering, Kubernetes, cybersecurity, automation, and operational excellence. 

This role is focused on helping federal customers modernize mission systems through secure cloud architecture, platform engineering, and DevSecOps transformation. The DevSecOps & Azure Architect serves as a technical leader responsible for translating mission requirements into enterprise-scale Azure solutions, enabling secure application delivery, improving operational agility, and accelerating cloud adoption across complex government environments.  

Architecture Design and Deployment

• Works in close collaboration with the Project Manager and Account Team to identify, categorize, and communicate business and technical risks (including security). Defines risk mitigation activities that are foundational to the project plan. Defines risk contingency plans for invocation should the risk occur. When appropriate, oversees a broad portfolio of accounts. Manages and ensures the all-up delivery of consulting engagements, as necessary. Maintains the risk log.

• Defines and documents the SFI architecture through an architecture description document, an architecture decisions log, and a requirements/risk/constraints traceability matrix to communicate the value proposition of the business solution along with the project approach. Leads cost-based and technology-based discussions to explain the architecture in terms of its build, deployment, and ongoing operational use to determine customer appetite for the business solution. Uses a business-value approach that values return on investment (ROI) and customer costs-savings over technical ease of execution.

• Identifies scenarios that could slow or impede pre-sales/delivery. Orchestrates the broader Microsoft team to address and record technical blockers and works with account/project team to resolve non-technical issues. Reports significant problems to Microsoft management and escalates when needed. Includes Security practitioners in early stages to cover customers CISO and CRO concerns as well as security and data privacy regulation. Plans a way forward in complex and ambiguous situations with an innovative approach and durable design. Delegates and uses specialist skills of others to drive technical alignment across internal/external teams. Coordinates disparate approaches into a single plan of action.

• Works with the business sponsor and customer/partner stakeholders (e.g., Business users, Enterprise Architects, Security Team, Operations Team) to gather and ratify requirements and constraints. Manages and resolves ambiguity in the requirements and constraints (including legislative and regulatory) and documents assumptions and implications where it cannot be resolved. Maintains the requirements/constraints traceability matrix to prove that solution components have a rationale/justification for inclusion in the Architecture of the business solution. Drives development and execution of Test Plans by SMEs to prove that each requirement/constraint has been implemented as expected by the customer, and includes security features and controls in test plans. Where there are defects or risks, works in close collaboration with the Project Manager and Customer to redress, mitigate or accept and document the status of the test results.

• Collaborates with the Account Team and/or Bid Team to understand the business solution/problem. Drives agreement, based on the customer’s priorities, requirements/constraints, approach, principles, concepts, and expectations. Builds and documents a realistically costed Solution Approach with traceability of requirements, constraints, decisions, and tradeoffs that balances risk, technical credibility, and technical innovation to meet customer need, predominantly based on existing solution offerings and/or reference architecture. Creates clarity around responsibility and accountability for the cybersecurity of the solution. Follows SFI principles. Jointly leads the implementation in close partnership with the Project Manager, working with IDCL. Exercises oversight and governance and establishes quality practices and standards to realize the business solution. Uses a cohesive build methodology with an agreed release schedule and timeline so the solution can be transitioned to live operations. Ensures communication of and adherence to the pre-sales value proposition. Works with the Project Manager to highlight where assumptions have proven false. Uses change requests to modify the solution/project approach when needed. As needed, collaborates with Subject Matter Experts to receive specialized advice that can help define the solution and project approach and increase the time to value for the customer.

• Leverages a structured SFI approach to architecture projects using existing methodologies (e.g., Waterfall, Agile, Iterative) that make use of existing reference architecture and established architectural styles and design patterns. Builds and maintains an architecture description document, an architecture decisions log, and a requirements/constraints traceability matrix to ensure the rationale for the business solution's Architecture is known and understood.

• Collaborates with the Project Manager to jointly drive project/technical governance of the design, build, and deployment into use of proof of concepts (POCs) and pilots. Works with customers to understand and demonstrate business value (e.g., release of revenue, cost savings) that the business solution realizes.

Practice Development

• Understands competitor solutions and identifies how customer business value can be driven through Microsoft's offerings. Steers the customer/partner conversations to the benefits of the solution rather than the features and functionalities. Understands how Microsoft supports similar customers through automation/AI.

Thought Leadership

• Participates in external architect community events (e.g., conferences, seminars, technical meetups, Webcasts, blogs, hackathons) and shares learnings with internal team. Acts a mentor to less experienced colleagues to educate them on technical and non-technical concepts.

• Shares ideas, insight, and strategic, technical input with technical teams, internal communities across the field, and the larger virtual team across Microsoft using a thorough knowledge of specific Microsoft products and their context in the competitive landscape.

Trusted Advisor

• Uses evidence-based arguments that articulate complex concepts in a simple manner to respectfully challenge Microsoft and customers/partners when a decision or course of action will not produce optimal results. Serves as the "technical conscience" to challenge the status quo and unrealistic expectations. Proactively resolves conflicts and seeks resolution to balance the overall outcome. Drives consensus where possible and leads decisions to resolve conflict when needed.

• Develops a network of internal/external relationships to build influence in addressing problems/ blockers and facilitating additional views on the matter of interest. Stays up to date on Microsoft’s technologies, products, and services in order to communicate Microsoft's mission, strategy, and capabilities.

• Understands competitor solutions and identifies how customer business value can be driven through Microsoft's offerings. Steers the customer/partner conversations to the benefits of the solution rather than the features and functionalities.

Understanding Customer/Partner Technical Environment

• Gathers and propagates customer/partner insights from a broad range of stakeholders as well as the main business sponsor that will help shape and form both the definition and ongoing execution of the project. Learns to Identify and evaluate industry trends (customer industry verticals, information technology [IT] industry). Recognizes and considers Microsoft's frameworks (e.g., Secure Architecture Framework) and customer risk appetites.

• Uses evidence-based approach to function as customer advocate and shares insights with Product Engineering teams and the business with a view to improving Microsoft technologies, products, services, and offerings such that they can better meet customer/partner needs.

• Works with customer/partner stakeholders (e.g., Enterprise Architects, Security Team, Development Team, Operations Team) and business sponsor to socialize both the business solution and the project approach to determine if changes are needed to the business solution. Where the cost of change is accepted by the customer, shares this feedback with the project team and the broader account team to make the necessary adjustments using mechanisms such as updating the solution approach and projected costs in presales and change requests in delivery. Engages in risk discussions bringing in Security SMEs to create clarity around who is responsible for cyber security around proposed solutioning.

Additional Responsibilities 

• Lead cloud architecture and DevSecOps transformation initiatives for Microsoft Federal customers 

• Define enterprise architecture roadmaps aligned to customer mission objectives and business outcomes 

• Design secure, scalable, and resilient Azure landing zones, platform services, and application hosting environments 

• Establish DevSecOps reference architectures, engineering standards, and governance models 

• Architect Infrastructure as Code (IaC) solutions to automate deployment and configuration management 

• Lead the design and implementation of Kubernetes platforms, containerized applications, and platform engineering capabilities 

• Integrate security, compliance, identity, and governance controls into cloud and software delivery architectures 

• Serve as the primary technical advisor to customer leadership and engineering teams 

• Conduct architecture reviews, technology assessments, and modernization planning activities 

• Mentor consultants, engineers, and technical teams while promoting engineering best practices 

• Collaborate across Microsoft teams, partners, and customer organizations to deliver mission-focused solutions 

• Support proposals, technical solutioning, and strategic growth initiatives 

Leadership Expectations 

Successful candidates will be expected to: 

• Drive technical strategy and architecture decisions 

• Influence executive stakeholders and customer leadership 

• Lead architectural governance and design reviews 

• Guide engineering teams through complex technical challenges 

• Mentor consultants and engineers 

• Establish reusable patterns, standards, and reference architectures 

• Balance mission objectives, operational realities, security requirements, and delivery constraints 

Required Qualifications

• Master's Degree in Computer Science, Information Technology, Engineering, or related field AND 4+ years experience in technology solutions, practice development, architecture, consulting, and/or technology domain (e.g., Security) OR Bachelor's Degree in Computer Science, Information Technology, Engineering, or related field AND 6+ years experience in technology solutions, practice development, architecture, consulting, and/or technology domain (e.g., Security) OR equivalent experience.

Other Requirements

Security Clearance Requirements: Candidates must be able to meet Microsoft, customer and/or 
government security screening requirements are required for this role. These requirements include, 
but are not limited to the following specialized security screenings: 
Classified as Microsoft Confidential
• The successful candidate must have an active U.S. Government Top Secret/SCI Security Clearance. 
Ability to meet Microsoft, customer and/or government security screening requirements are 
required for this role. Failure to maintain or obtain the appropriate clearance and/or customer 
screening requirements may result in employment action up to and including termination.
• Clearance Verification: This position requires successful verification of the stated security 
clearance to meet federal government customer requirements. You will be asked to provide 
clearance verification information prior to an offer of employment.
• Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud 
background check upon hire/transfer and every two years thereafter. 
• Citizenship & Citizenship Verification: This position requires verification of U.S. citizenship due 
to citizenship-based legal restrictions. Specifically, this position supports United States federal, 
state, and/or local United States government agency customer and is subject to certain 
citizenship-based restrictions where required or permitted by applicable law. To meet this legal 
requirement, citizenship will be verified via a valid passport, or other approved documents, or 
verified US government Clearance

Preferred Qualifications

• Master's Degree in Computer Science, Information Technology, Engineering, or related field AND 6+ years experience in technology solutions, practice development, architecture, consulting, and/or technology domain (e.g., Security) OR Bachelor's Degree in Computer Science, Information Technology, Engineering, or related field AND 8+ years experience in technology solutions, practice development, architecture, consulting, and/or technology domain (e.g., Security) OR equivalent experience.

• 4+ years technical sales experience.

• 4+ years project management experience.

• Technical or Professional Certification in Domain (e.g., Security).

• 8+ years of experience in cloud architecture, DevSecOps, software engineering, platform engineering, infrastructure engineering, or related technical disciplines 

• Bachelor's degree in Computer Science, Information Systems, Engineering, Cybersecurity, or equivalent experience 

• Proven experience designing and implementing enterprise-scale Azure solutions 

• Deep knowledge of Azure services including networking, identity, compute, storage, governance, security, monitoring, and automation 

• Experience architecting cloud-native and hybrid cloud environments 

• Strong understanding of Infrastructure as Code (IaC) using Bicep, Terraform, ARM Templates, or similar tools 

• Hands-on experience designing CI/CD and DevSecOps solutions using Azure DevOps, GitHub, and modern automation platforms 

• Experience with Kubernetes, Azure Kubernetes Service (AKS), container platforms, and platform engineering concepts 

• Working knowledge of Zero Trust architecture, cloud security principles, and compliance frameworks 

• Experience leading technical strategy discussions with executive, technical, and customer stakeholders 

• Strong consulting, communication, and leadership skills 

• Ability to obtain and maintain a U.S. Government security clearance 

Experience with the following technologies and capabilities is highly desired: 

• Microsoft Azure 

• Azure Landing Zones 

• Azure DevOps 

• GitHub Enterprise 

• Azure Kubernetes Service (AKS) 

• Container Platforms (Docker, Kubernetes) 

• Microsoft Entra ID 

• Azure Networking and Hybrid Connectivity 

• Azure Monitor, Log Analytics, and Application Insights 

• Bicep, Terraform, and ARM Templates 

• PowerShell, Python, C#, and Bash 

• Security Information and Event Management (SIEM) solutions 

• Cloud Security Posture Management (CSPM) 

• Platform Engineering and Site Reliability Engineering (SRE) 

• Zero Trust Architecture 

• Government security and compliance frameworks (NIST, RMF, DoD, FedRAMP, IL2-IL6) 

Solution Architecture IC4 - The typical base pay range for this role across the U.S. is USD $101,800 - $193,800 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $126,100 - $207,600 per year.

Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here:
https://careers.microsoft.com/us/en/us-corporate-pay

This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.

Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.

More jobs at Microsoft · Other jobs in Virginia