Cloud & Enterprise Applications Architect

The Association of Universities for Research in Astronomy (AURA) is a 501(c)3 nonprofit and consortium of universities that manages and/or operates world-leading astronomical observatoriesincluding the Hubble Space Telescope; James Webb Space Telescope; Vera C. Rubin Observatory; the Gemini Observatory; the Daniel K. Inouye Solar Observatory and many moreon behalf of the scientific community through our Centers: the Space Telescope Science Institute (STScI); the NSF National Optical/Infrared Laboratory (NOIRLab) and the NSF National Solar Observatory (NSO). Our mission is to enable transformational research in astrophysics and to share the wonders of the universe with the public. AURA partners with federal agencies universities scientific institutions and industry collaborators around the world to advance exploration discovery and education.

The Association of Universities for Research in Astronomy (AURA) is seeking a Cloud & Enterprise Applications Architect to design integrate and support AURAs cloud-based enterprise technology ecosystem with a primary focus on Microsoft Azure identity and access management enterprise application integrations data movement and API-based services. This position serves as a senior technical resource within the Enterprise IT Team and works across infrastructure cybersecurity business systems and functional departments to ensure AURAs cloud services and enterprise applications are secure scalable interoperable and supportable.

The role will focus on Microsoft Azure and Microsoft Entra ID architecture while supporting integrations involving systems such as Deltek Costpoint UKG Microsoft 365 and other enterprise platforms. The architect will help establish reusable integration patterns strengthen identity governance improve data exchanges between systems and reduce reliance on manual processes and one-off technical solutions.

This position is expected to function as a hands-on architect rather than solely as a strategic design individual should be comfortable moving between architecture engineering troubleshooting scripting integration development vendor coordination and technical documentation. This role reports to the Director of Enterprise IT has no direct reports but may lead cross-functional teams. Position is eligible for hybrid work and will require 3 days of on-site presence in our Washington DC office.

Essential Duties:

Cloud Architecture & Azure

• Design maintain and improve AURAs Microsoft Azure architecture including subscriptions resource groups networking identity application registrations and managed identities.
• Design solutions using core Azure services (Functions Logic Apps API Management Key Vault Storage monitoring) and support cloud modernization and migration initiatives.
• Produce architectural documentation technical diagrams and reusable cloud patterns; support governance resiliency and disaster-recovery planning.

Identity & Access Management

• Serve as technical lead for identity architecture using Microsoft Entra ID: authentication SSO MFA Conditional Access and application registrations.
• Design role-based access control models following least-privilege and separation-of-duties principles.
• Build identity lifecycle automation (onboarding transfers offboarding) and integrations between HR systems identity platforms and downstream applications.
• Apply modern identity/federation standards (SCIM SAML OAuth 2.0 OpenID Connect Microsoft Graph); partner with cybersecurity on governance privileged access and Zero Trust initiatives.

Security Governance & Compliance

• Ensure cloud and integration designs follow AURA cybersecurity standards and applicable regulatory/contractual requirements.
• Incorporate logging monitoring encryption secrets management and least-privilege access into all designs.
• Support IT audit activities with architecture documentation configuration evidence and technical controls; contribute to technology standards for Azure APIs identity and service accounts.

Enterprise Applications & Integration

• Provide architecture and integration support for enterprise platforms including Deltek Costpoint UKG Microsoft 365 Entra ID and Azure-hosted applications.
• Translate business requirements into secure technical solutions; evaluate APIs authentication models and system dependencies with application owners and vendors.
• Design and implement secure integrations between cloud platforms SaaS applications and internal systems; establish REST API middleware and event-driven integration standards.
• Maintain documentation of application dependencies API connections service accounts and data flows; favor reusable integration patterns over point solutions.

Data Architecture

• Design secure reliable methods for moving data between enterprise applications; document authoritative systems of record.
• Support integrations involving employee financial organizational and operational data and help improve data quality consistency and synchronization.
• Support database ETL/ELT API and file-based integration approaches and reporting/analytics initiatives that depend on reliable enterprise data.

Automation & Engineering

• Identify manual IT/business processes that can be automated via Azure APIs PowerShell Microsoft Graph or Python.
• Build automation for identity management integrations and monitoring; establish source control and change-management practices for scripts and cloud configuration.
• Create technical documentation so solutions can be maintained by the broader Enterprise IT Team.

Requirements:

• Bachelors degree in Information Technology Computer Science Information Systems Engineering or a related discipline or equivalent professional experience.
• Certifications in cloud and identify platforms such as AWS or Azure are preferred
• 7 years of progressively responsible experience in cloud infrastructure enterprise applications systems integration identity management or related disciplines
• 3 years of hands-on Microsoft Azure experience with strong experience in Microsoft Entra ID and enterprise identity technologies
• Demonstrated experience integrating SaaS and enterprise applications using APIs or middleware including REST APIs authentication protocols and automation.

Note: The annual salary range for this title is $115-140000. The posted salary range represents a general guideline; however AURA considers several factors when determining base salary offers such as internal pay equity the scope and responsibilities of the position the candidates experience education and skill and current market conditions.

Candidates are asked to submit one PDF that includes a resume & cover letter. The cover letter should address why the candidates interest and experiences are well suited for the role. Applications received by October 5 2026 will receive full consideration.

Individuals needing assistance with the employment process can contact us at

Compensation & Benefits

• Explore our benefits: leave and retirement.
• Comprehensive health dental and retirement benefits.
• Flexible work arrangements and potential travel opportunities to AURA facilities.

#LIHYBRID

Required Experience:

Staff IC