azure solutions architect

Zak Solutions for Computer Systems

<div>
 
 
 
 Position Overview
 
 
 
 
 We are seeking a skilled Microsoft Engineer with proven experience in cloud solution design, deployment, and management. The ideal candidate will leverage Microsoft Azure and related technologies to architect scalable, secure, and efficient cloud environments that meet business needs.
 
 
 
 
 
 
 
 
 
 
 Key Responsibility:
 
 
 
 <ul>
 <li>
 Design, implement, and manage Microsoft Azure cloud solutions (IaaS, PaaS, SaaS).
 </li>
 <li>
 Collaborate with stakeholders to assess requirements and translate them into technical solutions.
 </li>
 <li>
 Deploy and configure Azure services such as Virtual Machines, Networking, Storage, Kubernetes, and App Services.
 </li>
 <li>
 Ensure security, compliance, and governance across cloud environments.
 </li>
 <li>
 Optimize cloud infrastructure for performance, scalability, and cost efficiency.
 </li>
 <li>
 Provide technical support and troubleshooting for cloud-based applications and services.
 </li>
 <li>
 Automate deployments using PowerShell, ARM templates, or Terraform.
 </li>
 <li>
 Stay updated on emerging Microsoft cloud technologies and recommend adoption strategies.
 </li>
 </ul>
 
 
 
 
 
 
 
 
 
 
 
 
 Mandatory Certificates:
 
 
 
 <ul>
 <li>
 Microsoft Certified: Azure Administrator Associate.
 </li>
 <li>
 Microsoft Certified: Azure Solutions Architect Expert.
 </li>
 <li>
 Microsoft Certified: Azure Fundamentals.
 </li>
 </ul>
 
 
 Preferred Certificates:
 
 
 <ul>
 <li>
 Microsoft Certified: Azure Security Engineer Associate.
 </li>
 <li>
 Microsoft Certified: DevOps Engineer Expert.
 </li>
 </ul>
 
 
 
 
 
 
 
 
 
 
 
 
 Qualifications &amp; Skills
 
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in computer science, information technology, business, or a related field.
 </li>
 <li>
 5+ years of experience in cloud engineering with Microsoft Azure.
 </li>
 <li>
 Strong knowledge of cloud architecture, networking, and security principles.
 </li>
 <li>
 Hands-on experience with Azure Active Directory, Identity &amp; Access Management, and RBAC.
 </li>
 <li>
 Proficiency in scripting/automation tools (PowerShell, Python, Terraform).
 </li>
 <li>
 Familiarity with DevOps practices (CI/CD pipelines, GitHub Actions, Azure DevOps).
 </li>
 <li>
 Excellent problem-solving and communication skills.
 </li>
 <li>
 Experience with hybrid cloud environments and on-premises integration.
 </li>
 <li>
 Knowledge of containerization (Docker, Kubernetes).
 </li>
 <li>
 Exposure to cloud cost management tools.
 </li>
 <li>
 Strong command of
 
 English
 
 &mdash;both written and spoken.
 </li>
 </ul>
 
 
 
 
 
 
 
 
 
 
 
 
 # Only the relevant application will be viewed, and for the relevant candidate, please attach your updated resume &amp; bachelor's degree certificate and a copy of your professional certificates in order to arrange the interview.
 
 
 
 
 
 
 You can also send it to email: zakrecruitment@zakq8.com.
 
 
 
</div>

Microsoft Engineer

Acenet consulting

<div><div>Experience: 12 to 18 years
 
Location: Abu Dhabi
 
Job code: 101483
 
Posted on: Apr 17, 2026 
</div> 
About Us: 
AceNet Consulting is a fast-growing global business and technology consulting firm leveraging a consultative approach, deep domain expertise and strong technology capabilities across business transformation, IT strategy &amp; architecture, digital transformation, data engineering &amp; analytics, AI/ML, cloud &amp; infrastructure, enterprise applications and emerging technologies to deliver value to our global clients. AceNet&rsquo;s marquee clients include Tier-1 and Tier-2 banking &amp; financial services, asset &amp; wealth management, healthcare, consumer retail, eCommerce &amp; logistics, engineering, government &amp; public sectors, consulting and technology firms. With presence across Abu Dhabi UAE, Texas USA and India (Bangalore, Gurgaon &amp; Pune), AceNet brings strong consulting and delivery capabilities across project staffing, managed services, outsourcing and offshoring.
Job Summary: 
We are seeking a highly skilled and experienced Azure Technical Architect with hands-on experience in Microsoft Azure. The ideal candidate should possess excellent inter-company communication skills, demonstrated experience in designing and implementing complex Azure-based solutions, and a solid understanding of AI platforms (HPC/AI), including Microsoft AI, Cerebras, Fluid Stack and AMD-based architectures. This role involves working closely with cross-functional teams to deliver scalable, secure, and high-performance cloud solutions that align with business objectives.
<div>Key Responsibilities: 
<ul><li>Design, implement, and maintain end-to-end Azure solutions across various Azure services.</li><li>Continuously assess the health of Azure services and infrastructure using Azure Service Health, Resource Health, and Azure Monitor. Proactively identify potential issues and outages, minimizing downtime and ensuring service reliability.</li><li>Analyze performance metrics across compute, storage, network, and application layers &amp; Identify bottlenecks and performance gaps, recommending and implementing tuning strategies.</li><li>Translate complex business requirements into scalable, secure, and reliable Azure architecture designs.</li><li>Architect and lead complex application modernization journeys, including the decomposition of monolithic applications (e.g., legacy .NET apps) into scalable, secure, and cost-effective microservices on Azure.</li><li>Design end-to-end migration solutions for complex, multi-tier enterprise workloads, ensuring minimal business disruption and maximizing the return on cloud investment.</li><li>Evaluate application portfolios to provide strategic recommendations on migration paths: Rehost (lift-and-shift), Refactor, rearchitect (to microservices), or rebuild.</li><li>Act as a technical advisor to internal stakeholders and external and partner stakeholders.</li><li>Drive cloud adoption strategies and lead Azure cloud migration and modernization initiatives.</li><li>Collaborate with development, DevOps, AI/ML, and security teams to ensure optimal cloud architecture and deployment practices.</li><li>Provide architectural governance and ensure compliance with best practices, standards, and security policies.</li><li>Produce high-quality documentation, architecture diagrams, and solution blueprints.</li><li>Guide and mentor technical teams and conduct architectural reviews.</li><li>Stay current on the latest developments in Azure services and AI technologies.</li></ul></div>
<div>Role Requirements and Qualification: 
<ul><li>Bachelor&rsquo;s or master&rsquo;s degree in computer science, Information Technology, or related field.</li><li>Overall Experience 12+ Years, Relevant Experience 6+ Years in Azure Cloud and 2+ years&rsquo; experience in AI.</li><li>Microsoft Certified: Azure Solutions Architect Expert certification (required).</li><li>Core Azure Infrastructure: Azure Virtual Machines, Azure Virtual Desktop, Azure Virtual Network (VNet), Azure Application Gateway, Azure VPN Gateway, Azure ExpressRoute, Virtual WAN, Network Security Groups (NSGs), Azure Firewall, Private Endpoints, Private DNS.</li><li>Load Balancing Solution: Azure Load Balancer, Azure Application Gateway, Azure Frontdoor, WAF, Citrix NetScaler</li><li>Azure Storage Solutions: Azure Blob Storage, Azure Files, Azure Disk Storage, Azure Storage Accounts.</li><li>Azure Compute &amp; App Services: Azure App Services, Azure Functions, Azure Kubernetes Service (AKS), Azure Container Instances, Azure Service Fabric, API Management, Logic App, SQLMI, SQL Instance.</li><li>Monitoring &amp; Management: Azure Monitor, Azure Dashboards, Azure Workbooks, Log Analytics, Azure Automation, Azure Resource Manager (ARM), Azure Advisor, Cost Management &amp; Budgets, Management Groups &amp; Subscriptions.</li><li>Identity &amp; Access Management: Azure Active Directory (AAD), Azure Key Vault, Role-Based Access Control (RBAC), PIM, Azure Conditional Access</li><li>Security And Governance: Microsoft Defender for Cloud, Sentinel, Well-Architected Framework (WAF), Azure Policy.</li><li>Backup Solution: Azure Backup, Snapshot, Veeam Backup</li><li>Data Security &amp; Encryption: Azure Disk Encryption &amp; Azure Storage Service Encryption, Transparent Data Encryption (TDE) for Azure SQL.</li><li>Automation: Terraform, Bicep, Azure PowerShell &amp; CLI.</li></ul>
:DevOps &amp; CI/CD: Azure DevOps, Azure Repos, Azure Pipelines, Azure Boards, Azure Test Plans, Azure Artifacts, Azure DevTest Labs, Azure SDKs, Azure App Configuration, Azure Lab Services 
<ul><li>AI &amp; Machine Learning (Basic to Advanced Knowledge Required): Azure Machine Learning, Azure AI Bot Service, Azure Cognitive Services, Azure Databricks, Azure AI Search, Azure OpenAI, Azure Form Recognizer, Azure Immersive Reader, Azure Personalizer, Azure Video Indexer, Azure Metrics Advisor, Azure Custom Vision, Azure Translator, Azure Speech Services, Azure Content Safety, Azure Document Intelligence, Azure Foundry Models, Azure Health Bot, Azure Kinect DK, Azure Face API, Azure QnA Maker, Azure Language Understanding (LUIS), Azure Text Analytics, Azure Text to Speech, Azure Speaker Recognition, Azure Microsoft Genomics, Azure Project Bonsai.</li><li>Strong understanding of cloud architecture, networking, security, and automation.</li><li>Demonstrated experience with AI/ML solutions and integrations.</li><li>Excellent written and verbal communication skills with the ability to engage both technical and non-technical stakeholders.</li><li>Strong problem-solving skills and ability to work independently and as part of a team.</li><li>Preferred Soft Skills:</li><li>Ability to collaborate across multiple business units and technical teams.</li><li>Strong presentation and documentation skills.</li><li>Experience working in multi-cloud or hybrid cloud environments.</li><li>High level of curiosity and adaptability to new technologies.</li><li>Expert Industry: Financial Services, IT Services, Cloud Consulting, etc.</li></ul></div>
<div>Why Join Us: 
<ul><li>Opportunities to work on transformative projects, cutting-edge technology and innovative solutions with leading global firms across industry sectors.</li><li>Continuous investment in employee growth and professional development with a strong focus on up &amp; re-skilling.</li><li>Competitive compensation &amp; benefits, ESOPs and international assignments.</li><li>Supportive environment with healthy work-life balance and a focus on employee well-being.</li><li>Open culture that values diverse perspectives, encourages transparent communication and rewards contributions.</li></ul></div>
How to Apply: 
If you are interested in joining our team and meet the qualifications listed above, please apply and submit your resume highlighting why you are the ideal candidate for this position.</div>

Azure Cloud AI Technical Architect

INFRA ASSURE

ABOUT THE ROLEWe are looking for a skilled Azure Cloud Engineer to support a client's cloud infrastructure and transformation initiatives. You will be the primary technical resource for Azure architecture, operations, governance, and security , delivering hands-on implementation alongside strategic guidance, fully remote.KEY RESPONSIBILITIES- Design, deploy, and manage Azure infrastructure: Virtual Machines, Virtual Networks, AKS, and App Services.- Define and implement Azure landing zones, management groups, policy frameworks, and governance controls.- Lead cloud migrations, lift and shift, re platform, and re architect workloads from on-premises to Azure.- Architect and operate Azure networking: ExpressRoute, VPN Gateway, Azure Firewall, NSGs, and Private Endpoints.- Manage identity and access using Azure AD (Entra ID), RBAC, PIM, and Conditional Access.- Implement Azure Monitor, Log Analytics, and Microsoft Defender for Cloud for security and observability.- Build and maintain IaC pipelines using Terraform, Bicep, or ARM within Azure DevOps or GitHub Actions.- Provide technical guidance, documentation, and knowledge transfer to client teams.REQUIRED SKILLS &amp; EXPERIENCE-Multiple years of hands-on Azure experience across IaaS, PaaS, and SaaS services.- Deep knowledge of Azure networking: hub-spoke topologies, routing, DNS, and connectivity.- Strong experience with Azure security: Defender for Cloud, Sentinel, Key Vault.- Proficiency in Infrastructure-as-Code (Terraform preferred; Bicep / ARM acceptable).- Experience designing and managing Azure Kubernetes Service (AKS) clusters.- Working knowledge of Azure Storage: Blob, Files, ADLS Gen2, and lifecycle management.- Familiarity with Azure cost management and FinOps practices.- Experience with CI/CD pipelines via Azure DevOps or GitHub Actions.- Understanding of compliance frameworks (ISO 27001, SOC 2, GDPR) in Azure.- Strong communication skills for client-facing work.NICE TO HAVE- Microsoft certifications: AZ-305 (Solutions Architect Expert) or AZ-500 (Security Engineer) preferred.- Experience with multi-cloud environments (Azure + AWS or GCP).- Familiarity with Azure Virtual Desktop (AVD).- Exposure to Azure OpenAI Service or Azure ML workloads.WHAT WE OFFER- Fully remote engagement, work from anywhere.- Immediate start (3rd week of April) with a clearly scoped initial trial period.- Opportunity to transition directly to the end-client after a successful trial phase.- Competitive contract rate commensurate with experience.Job Type: Full-timeApplication Question(s):<ul><li>How soon can you join if selected?</li></ul>Willingness to travel:<ul><li>50% (Preferred)</li></ul>Work Location: RemoteExpected Start Date: 21/04/2026

Azure Cloud Engineer

COZMALABS

We are seeking a highly skilled and confident Presales / technical operation specialist to join our team. This role blends deep technical expertise in Microsoft Azure with strong communication and client-facing skills. You will be responsible for designing cloud architectures, sizing resources, and creating detailed, client-ready cloud adoption plans. As a key advisor to our clients, you&rsquo;ll also be presenting and defending your solutions, aligning best practices with business goals.Key Responsibilities<ul><li>Design and Architect scalable, secure, and cost-effective solutions on Microsoft Azure.</li><li>Develop and document cloud architecture diagrams, including infrastructure components, networking, storage, compute, and security layers.</li><li>Engage with clients to understand their business and technical needs, and translate these into cloud solutions.</li><li>Present and pitch solutions confidently to both technical and non-technical audiences, including stakeholders and executives.</li><li>Defend architectural decisions using industry best practices and Azure-native capabilities.</li><li>Collaborate with sales, engineering, and project delivery teams to ensure alignment from pre-sales to implementation.</li><li>Continuously stay up-to-date with Azure advancements and evolve your skill set through self-learning.</li></ul>Required Skills and Qualifications<ul><li>5+ years of experience working with Microsoft Azure, including IaaS, PaaS, networking, storage, identity, and security services.</li><li>Strong familiarity with Azure Pricing Calculator, TCO (Total Cost of Ownership), and cost optimization strategies.</li><li>Demonstrated experience in creating cloud architecture diagrams (e.g., using Visio, Lucidchart, or similar tools).</li><li>Excellent presentation and communication skills and be able to simplify complex ideas and tailor messaging to diverse audiences.</li><li>Strong client engagement and consultative selling experience, especially in pre-sales or solution design roles.</li><li>Self-driven and independent, with a passion for continuous learning and a deep technical curiosity.</li><li>Knowledge of cloud governance, compliance, and landing zone concepts.</li><li>Azure certifications such as AZ-305 (Azure Solutions Architect Expert) or AZ-104 (Azure Administrator) are a plus.</li></ul>Nice to Have<ul><li>Experience with hybrid cloud or multi-cloud environments.</li><li>Familiarity with DevOps practices and automation tools (e.g., Terraform, ARM templates, Bicep).</li><li>Background in systems engineering, enterprise IT, or cloud migration projects.</li></ul>Job Type: Full-timeWork Location: In person

Presales/ Technical Operation Specialist

LCPtracker Inc.

<div><div><div>Software Architect
</div></div>Company Summary
LCPtracker, Inc. is a cloud-based software (SaaS) provider specializing in labor compliance for public works construction projects. Headquartered in Orange, CA &ndash; with offices in New Braunfels, TX and Fenton, MI LCPtracker helps government agencies and prime contractors meet Davis-Bacon/prevailing wage compliance requirements on projects backed by federal, state, and/or local funding. Thousands of clients and over 100,000 contractors use LCPtracker for their certified payroll and construction site compliance needs. LCPtracker has been recognized year after year since 2017 as one of the &ldquo;Best Places to Work&rdquo; in Orange County by the Orange County Register.
Position Summary
As a Software Architect at LCPtracker, you will define and evolve the technical architecture of our Azure‑hosted SaaS platform. You are responsible for designing scalable, secure, and maintainable solutions that support both current product needs and long‑term business strategy. This role plays a critical part in LCPtracker&rsquo;s shift toward an AI‑first development approach, where artificial intelligence is intentionally integrated into how systems are designed, built, tested, and operated. You will guide architectural decisions that enable teams to effectively and responsibly adopt AI‑assisted and AI‑native capabilities across the platform. You will partner closely with Product, Software Development Managers, Platform, and Engineering teams to establish architectural standards, guide design decisions, and ensure consistent application of modern engineering practices.
Primary Duties and Responsibilities
<ul><li>Define and maintain the high-level architecture for LCPtracker&rsquo;s cloud native, Azure based SaaS platform
</li><li>Translate business and product requirements into scalable, secure, and extensible architectural designs
</li><li>Establish architectural patterns and reference implementations for:
</li><li>Application and service design
</li><li>Data architecture and integration
</li><li>Security, identity, and access control
</li><li>Observability, reliability, and performance
</li><li>Lead architectural design reviews and provide technical guidance to engineering teams without direct people management
</li><li>Collaborate with Software Development Managers to ensure architectural decisions are executable within CI/CD pipelines and delivery workflows
</li><li>Drive adoption of an AI first development approach, including:
</li><li>Designing systems that intentionally leverage AI for development, testing, quality, documentation, and operations
</li><li>Defining architectural patterns for AI assisted and AI enabled features
</li><li>Guiding responsible usage of AI tools with attention to security, data privacy, compliance, and auditability
</li><li>Establish standards for API design and integration, Azure services and cloud native capabilities
</li><li>Partner with Platform and DevOps teams on:
</li><li>CI/CD architecture
</li><li>Environment strategy
</li><li>Scalability, resilience, and cost optimization
</li><li>Act as a technical thought leader, staying current on modern architecture trends, Azure capabilities, and AI enabled development practices
</li></ul>Other Duties: Please note this job description is not designed to cover or contain a comprehensive list of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice.
Core Competencies
<ul><li>Expert level coding and debugging skills
</li><li>Azure‑based, cloud‑native solution architecture
</li><li>Distributed systems and SaaS platform design
</li><li>CI/CD and DevOps‑friendly architecture
</li><li>Security‑first and compliance‑aware design
</li><li>AI‑first development thinking with pragmatic judgment
</li><li>Strong documentation and technical communication skills
</li><li>Ability to influence technical direction without formal authority
</li></ul>Work Environment
This position performs its duties from our Orange, California OR New Braunfels, TX office. This position operates in a professional office environment and role routinely uses standard office equipment such as computers, phones, mobile devices, photocopiers, filing cabinets and fax machines.
Physical Requirements
While performing the functions of this job, the employee is regularly required to sit; frequently required to talk and hear, use hands and fingers to type, scroll and use computer equipment. The employee is required to have close visual acuity to perform an activity such as preparing and analyzing data and figures; transcribing; viewing a computer and multiple screens; extensive reading; visual inspection of text/data in both print and electronic forms.
Position Type and Expected Hours of Work
This is a full-time exempt position reporting to our Orange, California office. Days/hours worked are dependent on the workload at the time. General availability and presence in the office is expected during regular business hours Monday-Friday. However, some flexibility is allowed. Occasional evening and weekend work may be required as job duties demand.
Travel
There is no major travel requirement for this position. However, infrequent travel may be necessary to visit remote office(s), attend conferences/industry events, etc. Attendance at our corporate Staff Retreat is required. This event is a 2-3-day retreat. Attendance at our annual User Conference as assigned.
Salary Range
The salary range for this role is $150,000.00 - $170,000.00 annual salary + benefits
Pay offered may vary depending on multiple individualized factors, including market location, job-related knowledge, skills, and experience. The total compensation package for this position may also include other elements dependent on the position offered. Details of participation in these benefit plans will be provided if an employee receives an offer of employment.
Benefits
Along with competitive pay, as a full-time LCPtracker employee, you are eligible for the following benefits:
<ul><li>Paid Time Off
</li><li>10 Paid Holidays
</li><li>Phantom Stock
</li><li>401k Plan with up to 4% company match
</li><li>Medical Benefits (Health, Vision and Dental)
</li><li>Life Insurance
</li><li>LTD &amp; STD
</li><li>Employee discounts and perks program
</li></ul>LCPtracker participates in the E-Verify Program. E-Verify is an internet-based system operated by the Department of Homeland Security and the Social Security Administration. It allows employers to confirm an individual&rsquo;s employment eligibility to work in the United States. View the attached notices, available in English and Spanish, for important information regarding the E-Verify program. E-Verify Notice (PDF); Right to Work Notice (PDF)
LCPtracker, Inc. is an equal opportunity employer of all qualified individuals; including minorities, women, veterans, and individuals with disabilities, and regardless of sexual orientation or gender identity. LCPtracker, Inc. will consider for employment qualified applicants with criminal histories in a manner consistent with all federal, state, and local ordinances.
LCPtracker is committed to the full inclusion of all qualified individuals. In keeping with our commitment, LCPtracker will take steps to assure that people with disabilities are provided reasonable accommodations. Accordingly, if reasonable accommodation is required to fully participate in the job application or interview process, to perform the essential functions of the position, and/or to receive all other benefits and privileges of employment, please contact the LCPtracker Human Resources Department at HR@lcptracker.com.
Education and Experience
<ul><li>Bachelor&rsquo;s degree in computer science, software engineering, or equivalent practical experience
</li><li>8+ years of hands‑on software development experience, including significant work in the Microsoft technology stack (e.g., C#, .NET/.NET Core, SQL Server, Azure services)
</li><li>3+ years in an architecture or senior technical leadership role for SaaS or cloud‑based platforms
</li><li>Proven experience designing and operating production systems on Microsoft Azure
</li><li>Strong experience with:
</li><li>Cloud‑native architecture patterns
</li><li>CI/CD pipelines and Azure DevOps
</li><li>Infrastructure as Code
</li><li>Demonstrated ability to remain technically hands‑on enough to validate designs, review code, and guide complex technical decisions
</li><li>Nice to have:
</li><li>Experience designing AI‑assisted or AI‑first development architectures
</li><li>Experience with AI‑enabled features or platforms in regulated or data‑sensitive environments</li></ul></div>

Software Architect

Intelligent Technical Solutions

<div>Job Description

We are seeking a CMMC Security Engineer to design and build compliant Azure and Microsoft 365 environments for our CMMC consulting clients. This is a hands-on technical role. You will provision GCC and GCC High tenants, architect network security (Azure Firewall, VPN, NSGs), configure Entra ID with Conditional Access and Privileged Identity Management, deploy Intune for endpoint management, stand up Microsoft Sentinel for SIEM/SOAR, configure Purview for data protection, and deploy Defender for Endpoint across client environments. You will work from documented SOPs and a Control-Task Tracker that maps each NIST 800-171 control to specific Azure/M365 configurations. You will also capture technical evidence (screenshots, configuration exports, audit logs) to support the compliance documentation created by our GRC Consultants.

Job Responsibilities
<ul>
<li>Design and deploy CMMC-compliant enclave architectures in Azure: cloud-only (GCC/GCC High), hybrid (on-prem + GCC), and on-premises environments. Select and implement the appropriate topology (hub-spoke, segmented) based on client requirements.</li>
<li>Provision and configure Microsoft 365 GCC and GCC High tenants including initial setup, domain verification, licensing assignment, and tenant hardening.</li>
<li>Configure Microsoft Entra ID: user provisioning, Security Groups, Administrative Units, Conditional Access policies (MFA, device compliance, location-based, session controls), Privileged Identity Management (PIM), and Identity Protection risk policies.</li>
<li>Deploy and configure Microsoft Intune: device enrollment, compliance policies, configuration profiles, security baselines (CIS/STIG), BitLocker encryption with FIPS 140-2 compliance, Windows Update for Business rings, and application management via Company Portal.</li>
<li>Deploy and configure Microsoft Sentinel: Log Analytics workspace setup, data connector deployment (M365, Entra ID, Defender, Azure Activity, Firewall, NSG flow logs), KQL-based analytics rules, automation playbooks (Logic Apps), and CMMC compliance workbooks/dashboards.</li>
<li>Deploy and configure Microsoft Defender for Endpoint: device onboarding, antivirus policies, Attack Surface Reduction (ASR) rules, endpoint DLP, network protection, web content filtering, and vulnerability management.</li>
<li>Configure Microsoft Purview: sensitivity labels (CUI, FCI, Public), auto-labeling policies, DLP policies across Exchange, SharePoint, Teams, and endpoints, and information barriers where required.</li>
<li>Design and implement Azure networking: Virtual Networks, subnets, NSGs, Azure Firewall, Azure Bastion, VPN Gateway (site-to-site and point-to-site), Private Endpoints, route tables, and DDoS Protection.</li>
<li>For hybrid environments: configure Azure AD Connect (or Cloud Sync), hybrid device join, pass-through authentication or password hash sync, split DNS, and Azure Arc for on-premises server management.</li>
<li>Configure encryption across the environment: BitLocker (XTS-AES 256), FIPS 140-2 compliance mode, TLS 1.2+ enforcement, VPN encryption (IKEv2/AES-256), and Purview encryption for CUI-labeled content.</li>
<li>Execute remediation tasks from the CMMC Remediation Tracker as assigned by the GRC Consultant. Each task maps a specific NIST 800-171 control objective to an Azure/M365 configuration with step-by-step instructions.</li>
<li>Capture and organize technical evidence for each implemented control: configuration screenshots, policy exports (JSON), audit log samples, compliance reports, and test results.</li>
<li>Support incident response capability deployment: Sentinel playbook creation, automated notification workflows, and incident response procedure testing.</li>
<li>Perform client environment migrations to GCC/GCC High (tenant-to-tenant migration using BitTitan, ShareGate, or native Microsoft tools).</li>
<li>Work across 4-7 concurrent client environments at various stages of build and remediation.</li>
</ul>
Job Qualifications 
Required Technical Experience
<ul>
<li>Willing to work in a hybrid setup&mdash;remotely or on-site at client locations, as required.</li>
<li>3+ years hands-on experience administering Microsoft Azure and M365 environments in a professional capacity (not lab-only).</li>
<li>Direct experience configuring Conditional Access policies, Entra ID PIM, and identity architecture (cloud-only and hybrid with Azure AD Connect).</li>
<li>Direct experience deploying and managing Microsoft Intune for endpoint compliance, configuration profiles, security baselines, and BitLocker management.</li>
<li>Direct experience deploying Microsoft Sentinel including data connectors, KQL query writing, analytics rules, and automation playbooks.</li>
<li>Experience configuring Azure networking: VNets, NSGs, Azure Firewall or third-party NVA, VPN Gateway, and network security architecture.</li>
<li>Experience deploying Microsoft Defender for Endpoint including device onboarding, ASR rules, and vulnerability management.</li>
<li>Proficiency with PowerShell and Microsoft Graph API for automation and bulk configuration tasks.</li>
<li>Understanding of NIST SP 800-171 controls and how they map to specific Azure/M365 technical implementations.</li>
</ul>
Strongly Preferred Technical Experience
<ul>
<li>Experience with Microsoft 365 GCC or GCC High environments (tenant provisioning, licensing nuances, feature differences from commercial M365).</li>
<li>Experience with tenant-to-tenant migrations (commercial to GCC/GCC High) using BitTitan MigrationWiz, ShareGate, or native Microsoft tools.</li>
<li>Experience configuring Microsoft Purview: sensitivity labels, auto-labeling, DLP policies across Exchange, SharePoint, Teams, and endpoints.</li>
<li>Experience with FIPS 140-2 configuration and DISA STIG or CIS benchmark implementation via Intune or GPO.</li>
<li>Experience supporting defense industrial base (DIB) or federal contractor IT environments.</li>
<li>Experience with Azure Arc for hybrid server management and Azure Bastion for secure remote administration.</li>
</ul>
Required Certifications

(must hold at least two from this list):
<ul>
<li>Microsoft Certified: Azure Solutions Architect Expert (AZ-305) - Architecture design and decision-making.</li>
<li>Microsoft Certified: Azure Administrator Associate (AZ-104) - Core Azure resource management.</li>
<li>Microsoft Certified: Security Operations Analyst Associate (SC-200) - Sentinel, Defender, and security operations.</li>
<li>Microsoft Certified: Identity and Access Administrator Associate (SC-300) - Entra ID, Conditional Access, PIM.</li>
<li>Microsoft Certified: Information Protection and Compliance Administrator (SC-400) - Purview, DLP, sensitivity labels.</li>
<li>Microsoft Certified: Endpoint Administrator Associate (MD-102) - Intune and device management.</li>
</ul>
Preferred Certifications

(significant advantage):
<ul>
<li>CompTIA Security+ (SY0-701)</li>
<li>CMMC Registered Practitioner (RP) - Understanding of CMMC framework from technical perspective.</li>
<li>Microsoft Certified: Cybersecurity Architect Expert (SC-100)</li>
<li>Microsoft 365 Certified: Administrator Expert (MS-102)</li>
<li>Certified Information Systems Security Professional (CISSP)</li>
<li>GIAC certifications (GSEC, GCIA, GCIH) - Deep security operations knowledge.</li>
</ul>
Skills &amp; Competencies
<ul>
<li>Execution-focused: ability to follow SOPs and runbooks precisely while identifying when something does not match documented steps and escalating appropriately.</li>
<li>Multi-tenant management: comfortable switching between 4-7 different client Azure/M365 environments daily without cross-contaminating configurations.</li>
<li>Documentation discipline: every configuration change is documented, every evidence artifact is captured, every deviation from the SOP is noted.</li>
<li>Troubleshooting: when Conditional Access blocks legitimate users, when Sentinel data connectors go unhealthy, or when WDAC blocks a required application, you can diagnose and resolve without waiting for escalation.</li>
<li>Security mindset: you understand why least privilege matters, why default-deny is the correct network posture, and why FIPS-validated encryption is required for CUI.</li>
<li>Clear written communication: when you find something in the client environment that does not match what the GRC Consultant scoped, you can document it clearly so the team can make decisions.</li>
</ul>
Compensation

 Pay rate ranges from $120,000.00/annum up to $170,000.00/annum and may vary by experience and location.

Benefits
<ul>
<li>Medical Insurance Plan</li>
<li>Dental &amp; Vision</li>
<li>Life Insurance</li>
<li>Disability Coverage</li>
<li>Paid Time Off (starts at 15 days per year)</li>
<li>Maternity/Paternity Leave</li>
<li>Paid US Holiday</li>
<li>Retirement Plan</li>
<li>Salary Advancement/Loan</li>
<li>Health &amp; Wellness Program</li>
<li>Company-paid training and certification</li>
<li>Supplemental Life Insurance (Employee-paid)</li>
<li>Supplemental Health Plans (Employee-paid)</li></ul></div>

CMMC Security Engineer (US Hybrid)

Gain America Inc

Senior Dot Net ArchitectNow Hiring: .NET Architect &ndash; Gain America Inc.Location: ALBANY, New York (Hybrid / Onsite &ndash; State of New York Project) Job Type: ContractAbout the Role Gain America Inc. is seeking a highly experienced .NET Architect to support a State of New York initiative. This role is ideal for a hands-on technical leader with deep expertise across full-stack .NET technologies, cloud platforms, and enterprise application architecture. You will lead development efforts, design scalable systems, and mentor teams in a fast-paced, mission-critical environment.Key Responsibilities<ul><li>Architect, design, and develop enterprise-grade .NET applications</li><li>Lead full-stack development across front-end, middleware, and database layers</li><li>Guide development teams and enforce coding standards and best practices</li><li>Design and implement secure, scalable, and high-performance solutions</li><li>Collaborate with stakeholders, business analysts, and cross-functional teams</li><li>Oversee code quality, unit testing, and deployment processes</li><li>Drive cloud adoption and DevOps best practices</li></ul>Required QualificationsExperience:<ul><li>Minimum 12 years of experience in .NET application development and architecture</li></ul>Front-End Technologies:<ul><li>ASP.NET Core, jQuery, JavaScript, HTML5</li><li>Bootstrap, CSS / SCSS / LESS</li><li>Experience with third-party UI controls (Telerik, Infragistics)</li><li>Razor Pages, AJAX</li></ul>Middleware / Back-End:<ul><li>.NET Core, C#</li><li>Entity Framework Core, Web API</li><li>LINQ, XML, JSON, Swagger</li></ul>DevOps &amp; Tools:<ul><li>Docker, Docker Desktop</li><li>Visual Studio, SSMS</li><li>Git / TFS, Azure DevOps</li><li>Jira</li></ul>Database:<ul><li>SQL Server</li><li>Strong ability to write complex SQL queries and stored procedures</li></ul>Infrastructure:<ul><li>IIS</li></ul>Cloud Technologies:<ul><li>Azure App Insights</li><li>Azure Service Bus</li><li>Azure Functions</li><li>Azure Redis Cache</li><li>Azure Blob Storage / File Share</li></ul>Leadership:<ul><li>Experience leading teams of at least 5 developers</li></ul>Testing:<ul><li>Experience with XUnit / NUnit</li><li>Ability to design and implement unit test cases</li></ul>Desirable Qualifications<ul><li>Strong communication and stakeholder management skills</li><li>Proven experience as a Development Lead or Technical Lead in a .NET environment</li><li>Experience directing application development teams and delivering large-scale solutions</li></ul>Why Join Gain America Inc.?<ul><li>Work on impactful State of New York projects</li><li>Hybrid work flexibility</li><li>Competitive compensation</li><li>Opportunity to lead and shape enterprise solutions</li><li>Collaborative and growth-driven culture</li></ul>How to Apply Apply now via Indeed or send your resume to [kkumar@gainamerica.net].Gain America Inc. is an Equal Opportunity Employer. We value diversity and are committed to an inclusive workplace.Pay: $65.00 - $70.00 per hourExpected hours: 40.0 per weekApplication Question(s):<ul><li>MUST BE A US CITIZEN OR GREEN CARD HOLDER.</li></ul>Education:<ul><li>Bachelor's (Required)</li></ul>Ability to Commute:<ul><li>Albany, NY 12210 (Required)</li></ul>Work Location: In person

SENIOR .NET ARCHITECT

Search 10000+ Azure solutions architect jobs near you this April. New roles added regularly across leading industries. Apply today.