Cloud Computing Infrastructure Architect
Booz Allen Hamilton1 day ago
Base Salary
$87k - $198k/yr
Responsibilities
- Design and implement advanced cloud security capabilities in Microsoft Azure Government.
- Lead technical workstreams from architecture and design through implementation, testing, deployment, and operational transition.
- Engineer Azure Policy, secure configuration baselines, and automated configuration-drift detection and remediation.
- Implement and operate Microsoft Sentinel, including data connectors, Data Collection Rules, analytic rules, automation, workbooks, KQL, and monitoring architectures.
- Design Azure logging and monitoring architectures and improve telemetry classification, retention, cost control, and visibility.
- Secure cloud identity using Entra ID, RBAC, PIM, managed identities, service principals, and Key Vault.
- Automate security controls, detection, response, and security evidence through Infrastructure as Code and DevSecOps pipelines.
- Guide a small engineering team and drive solutions from concept through operational adoption.
Requirements
- 5+ years of experience designing, engineering, or securing Microsoft Azure environments.
- Experience engineering security solutions in Microsoft Azure Government, including Azure Policy, secure configuration baselines, and configuration-drift detection or remediation.
- Experience with Microsoft Sentinel, Microsoft Defender for Cloud, Defender XDR, Azure Monitor, Log Analytics, Diagnostic Settings, Event Hub, and Resource Graph.
- Experience developing Infrastructure as Code with Terraform and integrating security into CI/CD or DevSecOps pipelines.
- Experience securing cloud identity with Entra ID, RBAC, PIM, managed identities, service principals, and Key Vault.
- Public Trust determination and eligibility for a government investigation.
- Bachelor’s degree and Microsoft Azure certification.
- Preferred experience includes FedRAMP, FedRAMP 20x, NIST SP 800-53, continuous monitoring, federal Authorization to Operate processes, automated security evidence, compliance-as-code, Detection-as-Code, MITRE ATT&CK, advanced persistent threats, nation-state or AI-enabled cyber attacks, Microsoft Purview, Data Loss Prevention, data classification, exfiltration monitoring, vulnerability-management tooling, software supply-chain security, Azure backup and recovery, and federal logging requirements.
- Preferred certifications include CISSP, CCSP, AZ-500, SC-100, or equivalent cloud security certifications.
- Strong client-facing communication skills are preferred.
- U.S. citizenship is required due to the nature of work performed at the facility.
Benefits
- Health, life, disability, financial, and retirement benefits.
- Paid leave, professional development, tuition assistance, work-life programs, and dependent care.
- Recognition awards for exceptional performance and demonstration of company values.
- Full-time and part-time employees regularly working at least 20 hours per week are eligible for the applicable Booz Allen benefits programs.
- Work may be remote, hybrid, or onsite depending on the position listing, with possible work at Booz Allen or customer facilities; virtual employees are generally expected to keep cameras on during meetings.
About Booz Allen Hamilton
Booz Allen Hamilton builds and integrates software, analytics, AI, cloud, and cybersecurity solutions while providing engineering and consulting services, primarily for U.S. defense, intelligence, and civil government clients, with select commercial partnerships. Its business is largely government contracting and professional services delivering mission systems and cyber defense. Founded in 1914 and headquartered in McLean, Virginia, Booz Allen is a public company traded on the NYSE (ticker: BAH).