Cloud Solution Architecture Cybersecurity-CTJ-Top Secret/SCI

Overview

Microsoft Federal delivers a single unified organization centered around our customer. This organization is a first-of-its-kind for Microsoft, bringing together expertise, knowledge, and insights across our teams. All critical customer functions are brought under the same organizational umbrella, bringing the breadth and depth of our expertise into laser focus on serving the U.S. Federal Government.

We are committed to empowering our teams, building upon our strategic investments, and delivering the technology to achieve federal missions.  As our customers pursue their work, from defending the nation, to serving its people in challenging times, they look to Microsoft to help them innovate, and they expect end-to-end engagement tailored to their needs.

We aspire to

• Deliver the best technology to enable mission-critical work
• Support fast-paced innovation with the U.S Federal Government
• Drive focused, thoughtful, end-to-end delivery tailored to unique customer needs
• Continuously advance security processes within our long-standing engagement approach
• Develop products with inclusivity and accessibility at the core

Travel is an integral part of this position. You should be willing to travel as is demanded by the needs of our customers and our business. This position requires approximately 50% overnight travel and may require up to 75% overnight travel if you are not within commuting distance to work.

Microsoft is on a mission to empower every person and every organization on the planet to achieve more, and security, data protection, and privacy are vital pillars in our mission. Our culture is centered on embracing a growth mindset, a theme of inspiring excellence, and encouraging our diverse teams and leaders to bring their best each day. In doing so, we create life-changing innovations that impact billions of lives around the world. You can help us to achieve our mission.

Responsibilities

What Joining the Microsoft Team Means

Microsoft continues to invest over $20B over the next 5 years in cybersecurity, including providing our customers with services and solutions that integrate across the ecosystem by connecting all your identities, endpoints, apps, emails, docs and clouds to help you close critical gaps in coverage, reduce risk, and save costs with a streamlined security portfolio.

Customer Success: Microsoft aspires to help our customers achieve their own digital transformation, leveraging the power of Microsoft Cloud solutions and support offerings. To this end, Microsoft invests in a dedicated Customer Success team that will help Microsoft customers successfully realize their business outcomes.

• Security Solution Area: Microsoft aspires to help our customers achieve their secure digital transformation, leveraging the power of Microsoft Cloud security solutions and support offerings.
• Cybersecurity Cloud Solution Architect (CSA) – Exercise Platform and Integration Architect

We are seeking a versatile technical architect to join the Cyber Exercises Infrastructure cell within Microsoft Federal’s Security Customer Success Unit. This role designs, builds, integrates, and sustains the cloud and hybrid platforms required to deliver immersive cybersecurity exercises for U.S. Federal and Defense customers. The architect translates exercise and training requirements into working technical solutions spanning infrastructure, security products, automation, deployment tooling, APIs, and supporting services.

The Infrastructure cell develops and maintains the technical foundation required to deliver scalable, repeatable, and operationally realistic cyber exercises. This includes designing reusable range architectures, baseline environment templates, identity and access models, telemetry pipelines, and operational guardrails that support both adversary simulation and defender workflows. The team also leads environment readiness validation and post-exercise sustainment, including updates, hardening, and continuous improvements to performance and reliability.

The Exercise Platform and Integration Architect contributes to the design, deployment, configuration, and integration of exercise environments using Infrastructure as Code (IaC), CI/CD pipelines, APIs, scripting, and automation. Responsibilities may include provisioning Azure and hybrid resources, implementing identity and security configurations, integrating Microsoft and third-party security products, establishing logging and monitoring pipelines, developing automated deployment and configuration processes, and creating supporting infrastructure for adversary simulation and defender operations.

Cyber exercises are dynamic, live environments where infrastructure must adapt to evolving adversary actions and participant behavior. The Infrastructure Engineer plays a critical role in ensuring environments remain stable, secure, and fully operational to support mission objectives across civilian, Department of Defense, and Intelligence Community customers.

This is a hands-on, execution-focused role for candidates with a strong engineering foundation, technical adaptability, and the ability to solve complex problems independently. Exercise requirements frequently span multiple technologies or fall outside established implementation patterns. The architect must be comfortable researching unfamiliar technologies, developing and testing solutions, troubleshooting integration issues, and carrying an engineering problem from initial requirement through implementation and sustainment.

Qualifications

Bachelor's Degree in Computer Science, Information Technology, Engineering, Business, Liberal Arts, or related field OR equivalent experience

2+ years of experience in cloud/infrastructure technologies, information technology (IT) consulting/support, systems administration, network operations, software development/support, technology solutions, practice development, architecture, and/or consulting OR equivalent experience

Security Clearance Requirements

Candidates must be able to meet Microsoft, customer and/or government security screening requirements are required for this role.

These requirements include, but are not limited to the following specialized security screenings:

• The successful candidate must have an active U.S. Government Top Secret/SCI Security Clearance.

• Ability to meet Microsoft, customer and/or government security screening requirements are required for this role.
• Failure to maintain or obtain the appropriate clearance and/or customer screening requirements may result in employment action up to and including termination.

• Clearance Verification:

Additional information

This position requires successful verification of the stated security clearance to meet federal government customer requirements.

You will be asked to provide clearance verification information prior to an offer of employment.

• Microsoft Cloud Background Check:

This position will be required to pass the Microsoft Cloud background check upon hire/transfer and every two years thereafter.

• Citizenship & Citizenship Verification:

This position requires verification of U.S. citizenship due to citizenship-based legal restrictions.

Specifically, this position supports United States federal, state, and/or local United States government agency customer and is subject to certain citizenship-based restrictions where required or permitted by applicable law.

To meet this legal requirement, citizenship will be verified via a valid passport, or other approved documents, or verified US government Clearance

Additional or Preferred Qualifications

Experience in any of the below or willingness to learn

Cloud Infrastructure & Range Engineering

• Experience deploying and managing Azure resources including virtual machines, virtual networking, storage accounts, and identity services
• Familiarity with Infrastructure as Code (IaC) tools such as Terraform, Bicep, ARM templates, or Ansible for automated environment provisioning
• Experience with Azure tenant provisioning, subscription management, and resource governance within managed or enterprise environments
• Understanding of hybrid identity concepts including Microsoft Entra ID (Azure AD), Active Directory, and tenant isolation models
• Familiarity with containerization technologies (Docker, Kubernetes) for modular range component deployment

Security Tooling & Telemetry Configuration

• Familiarity with Microsoft Sentinel, including workspace configuration, log ingestion, data connectors
• Exposure to Microsoft Defender XDR suite (Defender for Endpoint, Defender for Identity, Defender for Office 365)
• Basic proficiency in Kusto Query Language (KQL) for log analysis and telemetry validation
• Experience configuring logging pipelines, diagnostic settings, and monitoring in cloud environments
• Understanding of how telemetry supports detection, analysis, and validation across red and blue team workflows

Scripting & Automation

• Proficiency in at least one scripting language (PowerShell, Python, or Bash) for automation and operational tasks
• Experience automating deployment, configuration management, or environment lifecycle tasks
• Familiarity with version control systems (Git) and CI/CD pipeline concepts
• Ability to write and maintain scripts that reduce manual effort and improve deployment consistency

Pay and benefits

Cloud Solution Architecture IC3 - The typical base pay range for this role across the U.S. is USD $86,100 - $169,800 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $113,300 - $187,400 per year.

Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here:

This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.