Solutions Architect 3 (JPID 1663JP00002929)

Client:
CTEC develops and delivers innovative customer-centric technologies and solutions that facilitate the Department of Energy’s (DOE) Los Alamos National Laboratory (LANL).

Job Title: Solutions Architect 3

Job Summary: The Solutions Architect is the principal architect of large and complex hardware, software, database, networking, and/or telecommunication solutions. Determines Laboratory-wide requirements and incorporates these requirements into solutions that may be commercial-off-the-shelf (COTS) or internally developed software and hardware. May be responsible for project management and implementing complex solutions. May be responsible for oversight of project documentation, marketing, training, budget, schedules, resource utilization, and benefits realization on complex solutions projects.
Has wide-ranging experience and uses professional concepts and Laboratory objectives to resolve complex issues creatively and effectively. Frequently contributes to the development of new theories and methods. Considered an expert in the field within the organization. Develops resolutions to complex problems that require the frequent use of creativity and where analysis of situations or data requires an in-depth evaluation of variable factors. Work is accomplished without considerable direction. May coordinate activities of other personnel. Exerts significant latitude in determining assignment objectives and the methods and procedures needed for new assignments.
Our work at Los Alamos National Laboratory (LANL) matters to our country and the world! The Innovative Customer Experience (ICE) Division seeks a dynamic leader. You will be responsible for developing, implementing, and maintaining automated guardrails for cloud environments on Microsoft Azure. Your role will ensure that all cloud resources, workloads, and processes comply with company policies, security frameworks, and industry regulations while optimizing for cost-efficiency, scalability, and performance. You will work closely with DevOps, Cloud Architects, Security teams, and other stakeholders to establish and enforce guardrails that prevent misconfigurations, mitigate risks, and promote best practices for cloud-native applications.

Duties & Responsibilities:
• Design, implement, and manage automated security policies in Azure using tools such as Azure Policy, Blueprints, and Azure Resource Manager (ARM) templates.
• Secure Azure Landing Zones with hands-on experience.
• Utilize Infrastructure-as-Code (IaC) tools like Terraform, Ansible, or similar.
• Prioritize platform automation over manual processes to reduce the risk of human error, improve efficiency, and ensure consistent application.
• Implement cost management and governance policies to avoid overspending, leveraging tools such as Azure Cost Management and Azure Advisor.
• Collaborate with DevOps, Cloud Architects, Security teams, and other stakeholders to establish and enforce guardrails.

Skills & Work Experience:
• Position requires a bachelor's degree and 10 to 15+ years of related experience or an equivalent combination of education and experience directly related to the occupation. At this level, post-graduate coursework may be desirable.
• Proven hands-on experience working with Microsoft Azure services.
• Experience designing, implementing, and managing automated security policies in Azure.
• Experience with Infrastructure-as-Code (IaC) tools like Terraform, Ansible, or similar.
• Strong understanding of cost optimization and governance policies in Azure.
• Experience in securing Azure Landing Zones.

Preferred Qualifications:
• Experience in cloud security frameworks (e.g., CIS Benchmarks, NIST, ISO 27001).
• Proficiency with PowerShell, Azure CLI, and/or ARM templates for automating tasks and enforcing cloud policies.
• Azure certifications (e.g., Microsoft Certified: Azure Security Engineer Associate, Azure Solutions Architect Expert) are highly preferred.

Additional Information:

The above statements describe the general nature and level of work the individual(s) assigned to this position perform. They are not intended to be an exhaustive list of all required duties, responsibilities, and skills.  CTEC management reserves the right to modify, add, or remove duties and to assign other duties as necessary.  In addition, reasonable accommodation(s) may be made applicable and available to enable individuals with disabilities to perform the essential functions of this position.

CTEC is a proud Equal Opportunity Employer! (EOE; M/F/D/V)

Please note: Candidate(s) must undergo a thorough pre-employment screening.