Job description

ON SITE REQ: Starts with 5 days a week on-site with flexibility to work remotely later with manager discretion. NO EXCEPTIONS! If they cannot work ON SITE then they are not a fit. Pls note: Mgr will do initial web based (Virtual IVs) to start - then will request IN PERSON Interviews as a follow up. Pls make sure your candidate is aware. No offer will be extended without them meeting them IN PERSON. Position Overview Microsoft Cloud Architect Town of Herndon The Town of Herndon is seeking a skilled, HANDS -ON and articulate Microsoft Cloud Architect to lead the planning, implementation, and change management of enterprise cloud technologies in alignment with the Town s IT Strategic Roadmap. This position is ideal for a strategic doer someone who can both implement solutions directly and secure executive buy-in through compelling visual storytelling and effective communication. The architect will translate complex initiatives into plain language and visual artifacts that promote clarity, confidence, and consensus across departments. The Cloud Architect will collaborate with implementation vendors and internal stakeholders to drive cloud modernization priorities, including SharePoint Online deployment, Microsoft Intune rollout, Microsoft Entra ID integration, Zero Trust security enforcement, and broader Microsoft 365 enhancements. A core responsibility of this position is the ability to present clearly to high level non-technical audiences, ensuring alignment, buy-in, and transparency at each stage of project implementation. Key Responsibilities Leadership Communication & Strategic Alignment Develop and deliver compelling, visual presentations (e.g., roadmaps, dashboards, milestone charts) for leadership audiences. Translate highly technical information into clear, plain-language briefings tailored to non-technical stakeholders. Present updates and recommendations during IT Steering Committee meetings and Town leadership strategy sessions. Align cloud modernization projects with Town priorities, budget planning, staffing readiness, and organizational change goals. Technology Implementation & Execution Configure and manage Microsoft Entra ID, Active Directory synchronization, and Intune deployment for full MDM/MAM lifecycle management. Lead the hands-on deployment and governance of: Zero Trust Security Controls: MFA, Conditional Access, DLP policies, legacy protocol blocking. Microsoft Defender for Office 365: Secure Score, policy tuning, threat mitigation. SharePoint Online & Microsoft Teams: Migration, permissions model, governance, and user onboarding. Perform root cause analysis, remediation, and ongoing optimization of cloud systems. Collaborate with vendors and validate that technical deliverables follow Microsoft best practices and align with the Town s architecture standards. Change Management & Adoption Enablement Lead enterprise-wide change management initiatives to ensure smooth adoption of cloud technologies. Create tailored communication plans, training roadshows, end-user readiness assessments, and cross-department FAQs. Work with department leads and champions to identify training gaps, develop communication materials, and reinforce adoption momentum. Monitor and report on user adoption metrics, system usage patterns, and qualitative feedback to refine rollout strategies. Anticipate resistance, mitigate transition risks, and create support structures that sustain user engagement post-deployment. Project Mapping, Coordination & Risk Management Create detailed project timelines, interdependency maps, and resource forecasts. Collaborate with project managers to track milestones, delivery risks, and mitigation plans. Facilitate coordination between vendors, internal IT staff, and department stakeholders to ensure smooth execution with minimal service disruption. Proactively identify and escalate delays, blockers, or scope misalignments to maintain momentum and transparency. Training, Documentation & End-User Support Deliver Town-wide training sessions, technical onboarding, and department-focused Q&A forums during rollout periods. Create and maintain training guides, job aids, and self-help documentation tailored to different learning levels. Provide Tier 2/3 support for escalated issues during key transitions (e.g., cutovers, migrations, policy enforcement). Maintain detailed technical runbooks, knowledge base content, and troubleshooting SOPs for sustained operational excellence. Required Qualifications: 8+ years of IT engineering or architecture experience, with at least 4 years focused on Microsoft 365, cloud infrastructure, or cybersecurity. Demonstrated experience delivering both hands-on implementation and high-quality executive communications. Proficiency in: Microsoft Entra ID, AD Connect, and IAM concepts Microsoft Intune MDM/MAM SharePoint Online, Microsoft Teams, and OneDrive governance Conditional Access, DLP, MFA, and Zero Trust design Microsoft Defender for Office 365 Experience developing executive briefings, project visuals, and user-facing adoption materials. Cloud Architecture Design: Demonstrates expertise in designing and implementing Microsoft 365 cloud solutions aligned with strategic IT goals. Required 5 Years Hands-On Implementation: Executes technical configuration and deployment of Entra ID, Intune, and Zero Trust security controls. Required 5 Years Executive Presentation Skills: Prepares and delivers compelling visual presentations for non-technical leadership audiences. Required 2 Years Change Management Communication and Execution: Leads organizational change initiatives with a focus on user adoption and communication planning Required 4 Years Zero Trust Security: Implements and manages MFA, Conditional Access, and DLP policies in a Microsoft 365 environment. Required 3 Years Project Roadmapping: Creates and maintains technical roadmaps, timelines, and milestone charts for cloud modernization projects. Required 5 Years Identity & Access Management (IAM): Configures and supports Microsoft Entra ID and Active Directory synchronization. Required 5 Years SharePoint Online Governance: Deploys, governs, and supports collaboration platforms such as SharePoint Online and Teams. Required 3 Years Microsoft Intune Administration: Manages device compliance, policies, and enrollment across hybrid and BYOD environments. Required 3 Years Cross-Functional Coordination: Collaborates with vendors, IT staff, and business units to ensure smooth project execution. Required 4 Years Technical Documentation: Develops runbooks, SOPs, and support documentation for ongoing cloud operations. Required 4 Years Leadership Engagement: Communicates IT strategy and project outcomes clearly to executive and steering committee stakeholders. Required 4 Years Training & Enablement: Designs and delivers user training, guides, and onboarding content tailored to department needs. Required 4 Years Security & Compliance Monitoring: Configures and reports on Microsoft Defender for Office 365 and Secure Score. Required 4 Years Risk & Issue Management: Identifies, tracks, and mitigates risks and blockers to maintain project timelines and quality. Required 4 Years Solution Validation & Optimization: Evaluates technical solutions for alignment with business needs and continuously optimizes configurations based on Required 5 Years Leadership Communication & Strategic Alignment Required 4 Years

Requirements