Cloud & Enterprise Applications Architect

The Association of Universities for Research in Astronomy (AURA) is a 501(c)3 nonprofit and consortium of universities that manages and/or operates world-leading astronomical observatories—including the Hubble Space Telescope; James Webb Space Telescope; Vera C. Rubin Observatory; the Gemini Observatory; the Daniel K. Inouye Solar Observatory and many more—on behalf of the scientific community through our Centers: the Space Telescope Science Institute (STScI); the NSF National Optical/Infrared Laboratory (NOIRLab), and the NSF National Solar Observatory (NSO). Our mission is to enable transformational research in astrophysics and to share the wonders of the universe with the public. AURA partners with federal agencies, universities, scientific institutions, and industry collaborators around the world to advance exploration, discovery, and education.

The Association of Universities for Research in Astronomy (AURA) is seeking a Cloud & Enterprise Applications Architect to design, integrate, and support AURA’s cloud-based enterprise technology ecosystem, with a primary focus on Microsoft Azure, identity and access management, enterprise application integrations, data movement, and API-based services. This position serves as a senior technical resource within the Enterprise IT Team and works across infrastructure, cybersecurity, business systems, and functional departments to ensure AURA’s cloud services and enterprise applications are secure, scalable, interoperable, and supportable.

The role will focus on Microsoft Azure and Microsoft Entra ID architecture while supporting integrations involving systems such as Deltek Costpoint, UKG, Microsoft 365, and other enterprise platforms. The architect will help establish reusable integration patterns, strengthen identity governance, improve data exchanges between systems, and reduce reliance on manual processes and one-off technical solutions.

This position is expected to function as a hands-on architect rather than solely as a strategic design role.The individual should be comfortable moving between architecture, engineering, troubleshooting, scripting, integration development, vendor coordination, and technical documentation. This role reports to the Director of Enterprise IT, has no direct reports but may lead cross-functional teams. Position is eligible for hybrid work and will require 3 days of on-site presence in our Washington, DC office.

Essential Duties:

Cloud Architecture & Azure

• Design, maintain, and improve AURA's Microsoft Azure architecture, including subscriptions, resource groups, networking, identity, application registrations, and managed identities.
• Design solutions using core Azure services (Functions, Logic Apps, API Management, Key Vault, Storage, monitoring) and support cloud modernization and migration initiatives.
• Produce architectural documentation, technical diagrams, and reusable cloud patterns; support governance, resiliency, and disaster-recovery planning.

Identity & Access Management

• Serve as technical lead for identity architecture using Microsoft Entra ID: authentication, SSO, MFA, Conditional Access, and application registrations.
• Design role-based access control models following least-privilege and separation-of-duties principles.
• Build identity lifecycle automation (onboarding, transfers, offboarding) and integrations between HR systems, identity platforms, and downstream applications.
• Apply modern identity/federation standards (SCIM, SAML, OAuth 2.0, OpenID Connect, Microsoft Graph); partner with cybersecurity on governance, privileged access, and Zero Trust initiatives.

Security, Governance & Compliance

• Ensure cloud and integration designs follow AURA cybersecurity standards and applicable regulatory/contractual requirements.
• Incorporate logging, monitoring, encryption, secrets management, and least-privilege access into all designs.
• Support IT audit activities with architecture documentation, configuration evidence, and technical controls; contribute to technology standards for Azure, APIs, identity, and service accounts.

Enterprise Applications & Integration

• Provide architecture and integration support for enterprise platforms including Deltek Costpoint, UKG, Microsoft 365, Entra ID, and Azure-hosted applications.
• Translate business requirements into secure technical solutions; evaluate APIs, authentication models, and system dependencies with application owners and vendors.
• Design and implement secure integrations between cloud platforms, SaaS applications, and internal systems; establish REST API, middleware, and event-driven integration standards.
• Maintain documentation of application dependencies, API connections, service accounts, and data flows; favor reusable integration patterns over point solutions.

Data Architecture

• Design secure, reliable methods for moving data between enterprise applications; document authoritative systems of record.
• Support integrations involving employee, financial, organizational, and operational data, and help improve data quality, consistency, and synchronization.
• Support database, ETL/ELT, API, and file-based integration approaches, and reporting/analytics initiatives that depend on reliable enterprise data.

Automation & Engineering

• Identify manual IT/business processes that can be automated via Azure, APIs, PowerShell, Microsoft Graph, or Python.
• Build automation for identity management, integrations, and monitoring; establish source control and change-management practices for scripts and cloud configuration.
• Create technical documentation so solutions can be maintained by the broader Enterprise IT Team.

Requirements:

• Bachelor’s degree in Information Technology, Computer Science, Information Systems, Engineering, or a related discipline, or equivalent professional experience.
• Certifications in cloud and identify platforms, such as AWS or Azure, are preferred
• 7+ years of progressively responsible experience in cloud infrastructure, enterprise applications, systems integration, identity management, or related disciplines
• 3+ years of hands-on Microsoft Azure experience, with strong experience in Microsoft Entra ID and enterprise identity technologies
• Demonstrated experience integrating SaaS and enterprise applications using APIs or middleware, including REST APIs, authentication protocols, and automation.

Note: The annual salary range for this title is $215-240,000. The posted salary range represents a general guideline; however, AURA considers several factors when determining base salary offers, such as internal pay equity, the scope and responsibilities of the position, the candidate's experience, education, and skill, and current market conditions.

Candidates are asked to submit one PDF that includes a resume & cover letter. The cover letter should address why the candidate’s interest and experiences are well suited for the role. Applications received by October 5, 2026 will receive full consideration.

Individuals needing assistance with the employment process can contact us at careers@stsci.edu.

Compensation & Benefits

• Explore our benefits: http://www.stsci.edu/opportunities/benefits
• Generous leave and retirement.
• Comprehensive health, dental, and retirement benefits.
• Flexible work arrangements and potential travel opportunities to AURA facilities.

#LIHYBRID