Solutions Architect 3

Spectra Tech is looking for a Solutions Architect 3.

The work we do at Los Alamos National Laboratory (LANL) matters to our country and the world! The Innovative Customer Experience (ICE) Division is looking for a dynamic leader. You will be responsible for developing, implementing, and maintaining automated guardrails for cloud environments on Microsoft Azure. Your role will involve ensuring that all cloud resources, workloads, and processes comply with company policies, security frameworks, and industry regulations, while optimizing for cost-efficiency, scalability, and performance. You will work closely with DevOps, Cloud Architects, Security teams, and other stakeholders to establish and enforce guardrails that prevent misconfigurations, mitigate risks, and promote best practices for cloud-native applications.

What You Need

Minimum Job Requirements:

- Experience with design, implement, and manage automated security policies in Azure using tools such as Azure Policy, Blueprints, and Azure Resource Manager (ARM) templates.

- Experience with Hands on Securing Azure Landing Zones.

- Experience with Infrastructure-as-Code (IaC) tools like Terraform, Ansible, or similar.

- Prioritize platform automation over manual processes to reduce the risk of human error, improve efficiency, and ensure consistent application

- Experience in cost optimization including Implementing cost management and governance policies to avoid overspending, leveraging tools such as Azure Cost Management and Azure Advisor.

- Proven ability working within an existing azure team with work hands on experience and securing azure landing zones.

Education/Experience:

Position requires a bachelor's degree and 10 years of related experience, or an equivalent combination of education and experience directly related to the occupation.

Desired Qualifications:

- Security & Compliance: Experience in cloud security frameworks (e.g., CIS Benchmarks, NIST, ISO 27001).

- Scripting & Automation: Proficiency with PowerShell, Azure CLI, and/or ARM templates for automating tasks and enforcing cloud policies.

- Certifications: Azure certifications (e.g., Microsoft Certified: Azure Security Engineer Associate, Azure Solutions Architect Expert) are highly preferred.