Microsoft Azure, Microsoft 365, and AI Solution Architect

Seeking an experienced Solution Architect to lead the design of a secure and scalable Microsoft 365 GCC and Azure AI platform. This role owns application, integration, data, identity, security, network, document intelligence, enterprise search, generative AI, and DevSecOps architecture.

Responsibilities

• Define target-state application, integration, data, AI, security, network, and deployment architecture.
• Design SharePoint Online, Microsoft Graph, Microsoft Purview, and Entra ID integrations.
• Establish Azure hosting, messaging, storage, database, API, monitoring, and environment standards.
• Own RBAC, managed identities, private networking, encryption, Key Vault, WAF, and Zero Trust architecture.
• Design Azure AI Document Intelligence, Azure AI Search, Azure OpenAI, RAG, and GraphRAG solutions.
• Define metadata, ontology, provenance, entity-resolution, relationship, and temporal-lineage models.
• Establish Azure governance, naming, tagging, monitoring, infrastructure-as-code, and CI/CD standards.
• Lead architecture reviews and provide technical direction to engineering teams.

• Ten or more years of enterprise solution-architecture experience, including Microsoft and Azure architecture responsibility
• Microsoft 365 GCC, SharePoint Online, Microsoft Graph, Entra ID, and Microsoft Purview
• Azure Functions, Container Apps, App Service, API Management, Service Bus, Event Grid, Storage, SQL, Cosmos DB, and Key Vault
• Azure AI Document Intelligence, Azure AI Search, and Azure OpenAI
• Semantic and vector search, embeddings, hybrid retrieval, RAG, GraphRAG, ontologies, and knowledge graphs
• Entra ID app roles, Azure RBAC, managed identities, Conditional Access, PIM, OAuth 2.0, and OpenID Connect
• Virtual networks, private endpoints, private DNS, Azure Firewall, Application Gateway, WAF, and Zero Trust
• Azure Monitor, Log Analytics, Application Insights, Azure Policy, and cost governance
• Bicep or Terraform, Azure DevOps, Git, and CI/CD
• NIST SP 800-53, CUI, data residency, records governance, and secure DevSecOps

Key deliverables

• Solution Architecture Document and target-state diagrams
• Security, identity, and network architecture
• Document Intelligence and data architecture
• Azure AI Search, Azure OpenAI, and RAG/GraphRAG architecture
• DevSecOps, environment, monitoring, and operational architecture, * Government cloud or regulated-environment experience
• Experience with authorization-aware RAG or GraphRAG
• Microsoft Certified: Azure Solutions Architect Expert
• Azure security, networking, AI, DevOps, or Microsoft 365 certification