Cloud Architect - Azure

About Samtek

At Samtek, we're redefining cloud innovation as an engineer-owned and operated, SBA-certified minority-owned small business founded in 2018. Our mission is simple: empower federal agencies and large enterprises with cutting-edge DevSecOps and cloud transformation solutions that drive security, scalability, and speed. From cloud-native application development and platform engineering to robust security implementations, data center migrations, and seamless operations, we deliver modern IT services backed by over 50 years of collective expertise.

We're a diverse, collaborative team that's passionate about pushing the boundaries of technology. Our culture thrives on curiosity, inclusivity, and real impact—whether it's optimizing cloud environments for mission-critical operations or fostering innovation in a supportive, hybrid work setting. Join us to work on high-stakes projects that matter, grow alongside top talent, and be part of a company that's not just building the future of cloud computing, but shaping it.

Samtek: Where engineers lead, and excellence follows.

Samtek Inc is seeking an experienced Azure Cloud Architect to lead the design, implementation, and governance of secure, scalable Azure solutions for the Centers for Medicare & Medicaid Services (CMS). You will serve as a technical lead on a fast-moving cloud migration and modernization team supporting mission-critical systems.

• Architect end-to-end Azure solutions in Azure Government (GCC High) using Landing Zones, Policy, Blueprints, and ARM/Bicep.
• Design and enforce FedRAMP High, CMMC Level 2+, and CMS ARS compliant architectures.
• Lead cloud migration waves (rehost, refactor, re-architect) using Azure Migrate, ASR, and Database Migration Service.
• Implement Zero Trust networking (Azure Firewall, Private Link, VNet peering, ExpressRoute).
• Drive DevSecOps pipelines with Azure DevOps, GitHub Actions, Terraform Cloud, and Sentinel.
• Author Architecture Review Board (ARB) packages, Security Assessment Reports, and System Security Plans (SSP).
• Mentor junior engineers and conduct brown-bag sessions on Azure best practices.
• Participate in CMS Technical Review Board (TRB) and Security Control Assessments (SCA).

Required Skills & Experience

• 5+ years hands-on Azure architecture experience.
• Azure Solutions Architect Expert (AZ-305) certification – active. 3+ years working in Azure Government / GCC High environments.
• Deep expertise in Azure Policy, Azure Blueprints, Management Groups, and Resource Graph.
• Proven experience with Azure Landing Zone deployments (Enterprise-Scale reference architecture).
• Strong scripting: PowerShell, Azure CLI, Bicep, Terraform.
• U.S. citizenship and ability to pass CMS background investigation.

• Bachelor’s degree in Computer Science, Engineering, or related field (or equivalent experience).
• Additional certifications: Azure Security Engineer (AZ-500), DevOps Engineer (AZ-400), CISSP, CCSP.
• Experience with CMS MARS-E 2.0, Risk Management Framework (RMF), and ATO packages. Prior work on CMS SPARC, ESIM, or EPMO task orders.
• Familiarity with Databricks, Synapse, Azure Health Data Services, or FHIR APIs.
• Active Public Trust or higher clearance.

• Must have resided in the U.S. for at least 3 of the last 5 years.
• Must be eligible for Public Trust clearance (ability to obtain and maintain).
• Visa sponsorship is not available for this role.