Distinguished, Cloud Solutions Architect -Enterprise Services, Hybrid

Sandia National Laboratories is the nation's premier science and engineering lab for national security and technology innovation, with teams of specialists focused on cutting-edge work in a broad array of areas. Some of the main reasons we love our jobs:

• Challenging work with amazing impact that contributes to security, peace, and freedom worldwide
• Extraordinary co-workers
• Some of the best tools, equipment, and research facilities in the world
• Career advancement and enrichment opportunities
• Flexible work arrangements for many positions include 9/80 (work 80 hours every two weeks, with every other Friday off) and 4/10 (work 4 ten-hour days each week) compressed workweeks, part-time work, and telecommuting (a mix of onsite work and working from home)
• Generous vacation, strong medical and other benefits, competitive 401k, learning opportunities, relocation assistance and amenities aimed at creating a solid work/life balance*

World-changing technologies. Life-changing careers. Learn more about Sandia at: http://www.sandia.gov

*These benefits vary by job classification.

Sandia National Laboratories Enterprise Cloud Services Department (9789) is seeking a highly skilled Cloud Solutions Architect with extensive experience in designing, deploying, and optimizing enterprise-grade cloud platforms. This role requires a comprehensive understanding of both Infrastructure as a Service (IaaS) and Platform as a Service (PaaS) offerings, as well as expertise in establishing landing zone architectures that support secure and efficient cloud environments.

You will be instrumental in leading architectural initiatives that ensure scalable, secure, and resilient cloud solutions, aligning with organizational performance and business objectives while effectively managing Disaster Recovery (DR), High Availability (HA), and cost optimization strategies.

On any given day, you may be called on to:

• Design Azure-based architectures aligned with security, compliance, and business requirements.
• Develop cloud governance frameworks, standards, and best practices.
• Assess on-prem workloads for cloud suitability and define migration roadmaps.
• Define and implement disaster recovery (DR) and backup strategies.
• Promote Infrastructure-as-Code (Terraform, ARM, Bicep) and automation via CI/CD pipelines.
• Collaborate with DevOps, Security, Networking, and Finance teams to ensure seamless cloud operations.
• Support multi-cloud and hybrid connectivity, including VPNs and ExpressRoute.
• Ensure FinOps practices and cost governance using Azure Cost Management.
• Implement cloud security and compliance controls following CIS, NIST, and ISO 27001 frameworks.

*The selected applicant can work a combination of onsite and offsite work. The selected applicant must live within a reasonable distance for commuting to the assigned work location when necessary.

$157,100 - $267,000

*Salary range is estimated, and actual salary will be determined after consideration of the selected candidate's experience and qualifications, and application of any approved geographic salary differential.

• Bachelor's degree in Computer Science, Information Technology, or Cybersecurity or related field; or equivalent relevant experience or education (Associate's degree + 4 years or no degree + 8 years)
• 12 years of IT experience and at least 5+ years focused on Microsoft Azure
• Experience with Identity and Access Management (IAM) and Privileged Access Management (PAM) technologies and identity architecture.
• Knowledge of multi-factor authentication (MFA) and identity synchronization.
• Experience with cloud security tools and practices.
• Familiarity with threat detection and monitoring methodologies.
• Understanding of compliance and policy enforcement in cloud environments and across cloud platforms/services.
• Experience with cloud infrastructure management and provisioning.
• Knowledge of networking concepts and virtual environments.
• Familiarity with logging and monitoring for cloud performance and availability.
  

• Experience supporting federal IT modernization efforts.
• Experience with implementing cloud security and compliance controls following NIST and CIS benchmarks.
• Experience with implementing compliance controls following the NIST AI Risk Management Framework
• Familiarity with reusable automation solutions, particularly with ISD and PowerShell.
• Azure role-based certifications[VS1]
• Experience with Infrastructure as Code (IaC) such as Azure Bicep or Terraform.
• Experience in identity planning, governance, and policy definition for M365 environments.
• Familiarity with Office 365 configuration, automation (PowerShell), and workload migration.
• Understanding of data security and compliance considerations in M365 adoption.
• Knowledge of device enrollment, compliance policies, and configuration profiles in Intune.
• Experience with cloud-based data platforms for data integration, management, and analytics to support enterprise-level decision-making.
• Experience with implementing cloud-based Artificial Intelligence (AI) solutions for enterprise environments.
• Experience with implementing M365 Copilot across an enterprise environment.
• Experience with Microsoft Intune for mobile device management (MDM) and application management.

Enterprise Cloud Services leads the R&D, implementation, operations and management of world-class Enterprise Cloud Infrastructure, Platforms and Services while providing IT Modernization leadership to Cloud-Native practices.

This posting will be open for application submissions for a minimum of seven (7) calendar days, including the 'posting date'. Sandia reserves the right to extend the posting date at any time.

Sandia is required by DOE to conduct a pre-employment drug test and background review that includes checks of personal references, credit, law enforcement records, and employment/education verifications. Applicants for employment need to be able to obtain and maintain a DOE Q-level security clearance, which requires U.S. citizenship. If you hold more than one citizenship (i.e., of the U.S. and another country), your ability to obtain a security clearance may be impacted.

Applicants offered employment with Sandia are subject to a federal background investigation to meet the requirements for access to classified information or matter if the duties of the position require a DOE security clearance. Substance abuse or illegal drug use, falsification of information, criminal activity, serious misconduct or other indicators of untrustworthiness can cause a clearance to be denied or terminated by DOE, resulting in the inability to perform the duties assigned and subsequent termination of employment.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, or veteran status and any other protected class under state or federal law.

If you have a Medical Portable Electronic Device (MedPED), such as a pacemaker, defibrillator, drug-releasing pump, hearing aids, or diagnostic equipment and other equipment for measuring, monitoring, and recording body functions such as heartbeat and brain waves, if employed by Sandia National Laboratories you may be required to comply with NNSA security requirements for MedPEDs.

If you have a MedPED and you are selected for an on-site interview at Sandia National Laboratories, there may be additional steps necessary to ensure compliance with NNSA security requirements prior to the interview date.