Description

Dinè Source is seeking a Lead Solutions Architect to guide technical architecture for a modernization effort. This role is pivotal in designing secure, scalable, and compliant system architecture. The ideal candidate has a deep technical expertise in cloud-native architecture with authoritative knowledge of DoD cybersecurity frameworks and secure software development practices.

Primary Duties

• Lead end-to-end technical architecture for the platform, including application, data, API, and integration layers across the IL5 cloud environment
• Define and refine system blueprints aligned with modular microservices, the Strangler Pattern, and Oracle-backed operational data store design to support consolidation of eight disparate legacy subsystems
• Drive Zero Trust Architecture implementation including Identity, Credential, and Access Management (ICAM), role-based access control, encryption, and network segmentation
• Guide Agile development teams on technical direction, enforce DevSecOps controls, and ensure alignment with containerized delivery in GitLab CI/CD pipelines
• Architect and oversee Azure cloud deployments, ensuring secure use of Azure services such as Azure Kubernetes Service (AKS), Azure API Management, Azure Monitor, Azure Key Vault, Azure Storage, and Azure Active Directory (AAD).

Technical Responsibilities

• Design secure, scalable, and compliant system architecture that meets the requirements for modernizing DRAS to serve 2.9 million military retirees and beneficiaries
• Implement cloud-native enterprise architecture solutions specifically leveraging Microsoft Azure, including IL5-compatible services, Azure PaaS/SaaS capabilities, and Azure Government cloud offerings.
• Align long-term cybersecurity strategy, aligning with DoD Zero Trust roadmap and DFARS compliance
• Conduct architecture and security risk assessments, design mitigation strategies, and lead security reviews during sprint closeouts
• Collaborate with cross-functional teams including product owners, infrastructure teams, and application developers to validate architecture decisions that meet performance, scalability, and auditability requirements
• Ensure proper configuration and governance of Azure cloud resources, including network topology, identity management, cloud security baselines, and logging/monitoring through Azure-native tools

Education & Experience

• Bachelor's degree in computer science, Information Systems, Cybersecurity, Engineering, or related technical field (Masters preferred)
• 9+ years of experience in enterprise solution design and architecture
• 5+ years of experience in cybersecurity leadership roles
• DoD-approved 8140/8570 CISSP/IA System Architecture & Engineering baseline cybersecurity certification
• Public Trust / DoD IAT Level II certification

Technical Skills

Cloud & Enterprise Architecture:

• Expert-level proficiency in cloud-native enterprise architecture, with experience in major cloud platforms (AWS, Azure, GCP)
• Hands-on experience architecting, deploying, and securing solutions in Microsoft Azure (Azure Government and/or DoD IL5 environments preferred)
• Advanced understanding of service-oriented design and microservices architecture
• Experience with containerization and cloud-agnostic deployment strategies
• Proficiency in infrastructure-as-code tools such as Terraform, including Azure Resource Manager (ARM) or Bicep templates as a plus.

Development & Integration:

• Proficiency in architecture tools such as CAST Imaging
• Experience with CI/CD security integration using tools like Fortify and GitLab
• Familiarity with DevSecOps practices and automated security controls
• Understanding of API design and integration patterns
• Experience using Azure DevOps or GitLab runners deployed within Azure environments is a plus

Data Architecture:

• Familiarity with data architecture best practices and Oracle database systems
• Knowledge of SFIS/SLOA compliance requirements
• Experience with encryption at rest and in transit implementation
• Understanding of data retention policies per NARA requirements
• Experience designing data pipelines or data services within Azure (e.g., Azure SQL, Cosmos DB, Azure Data Factory) preferred

Soft Skills

• Strong leadership abilities with experience guiding technical teams and architecture decisions
• Excellent communication skills for interfacing with government stakeholders, cybersecurity teams, and technical staff
• Ability to work effectively in fast-paced Agile environments while maintaining security and compliance standards
• Strong analytical and problem-solving skills for complex enterprise architecture challenges

Preferred Qualifications

• Professional certifications such as CCSP, AWS/Azure Solutions Architect, and DoD 8140/8570.01 IASAE Level II or CSSLP Infrastructure Support baseline certification
• Azure-specific certifications highly desirable (e.g., Azure Solutions Architect Expert, Azure Security Engineer Associate, Azure Administrator Associate).
• Azure security-related certifications highly desirable (e.g., Microsoft Certified Cybersecurity expert, Azure Security Engineer Associate)
• Experience with DFAS systems or DoD financial management environments
• Knowledge of government pay systems and financial regulations
• Experience with Strangler Pattern implementation for legacy system modernization
• Familiarity with Oracle database architecture and optimization
• Knowledge of continuous monitoring tools and vulnerability management in government environments
• Experience with GitLab CI/CD pipelines and automated security testing integration
• Understanding of federal audit requirements and compliance frameworks

This contractor and subcontractor shall abide by the requirements of 41 CFR 60-1.4(a), 60-300.5(a) and 60-741.5(a). These regulations prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities, and prohibit discrimination against all individuals based on their race, color, religion, sex, sexual orientation, gender identity, national origin, or for inquiring about, discussing, or disclosing information about compensation, or any other basis prohibited by law. We participate in E-Verify.

#dinesourcejobs

PI281264791