Infrastructure Architect

Description:
Onsite in Santa Ana, CA

The Infrastructure Architect will work on-site to lead enterprise IT architecture strategy, design hybrid cloud infrastructure, ensure compliance with public safety standards such as CJIS, and act as a senior technical advisor to internal teams. The role requires extended hours during migrations, outages, security events, and other critical maintenance windows, and provides mentorship and skills development to build internal technical capability.

Due to federal security clearance requirements, applicant must be a United States Citizen or Permanent Resident. Due to client requirements, applicants must be willing and able to work on a w2 basis. For our w2 consultants, we offer a great benefits package that includes Medical, Dental, and Vision benefits, 401k with company matching, and life insurance.

Rate: $65.00 to $75.00/hr. w2

Responsibilities:
Responsibilities

• Lead the technical architecture of a secure, resilient, and scalable hybrid environment across Azure, AWS, and on-premises infrastructure.
• Define integration strategies for legacy systems and cloud-based workloads to support modernization.
• Develop infrastructure standards, policies, and lifecycle strategies.
• Serve as the lead technical expert for infrastructure, virtualization, networking, and cloud services.
• Provide on-site, hands-on leadership for implementation, maintenance, and performance optimization.
• Support after-hours cutovers, incidents, and emergency responses as needed.
• Act as a subject matter expert and mentor for IT staff, enabling knowledge transfer and skills development.
• Mentor staff on Microsoft 365, Intune, Azure Backup, and Endpoint Manager operations.
• Design secure architectures compliant with CJIS, NIST, and state or local standards.
• Oversee identity architecture including Active Directory, Azure AD/Entra ID, AWS IAM, MFA, and RBAC.
• Manage PKI infrastructure and ensure encryption, access control, auditability, and secure connectivity.
• Guide phased migration of infrastructure workloads and services to cloud platforms.
• Architect hybrid networking including VPN, SD-WAN, ExpressRoute, and Direct Connect.
• Automate deployments using Infrastructure as Code such as Terraform, PowerShell, ARM templates, and CloudFormation.
• Maintain documentation including diagrams, SOPs, runbooks, security plans, and recovery procedures.
• Conduct training and knowledge transfer sessions for department staff.
• Create and maintain compliance documentation for internal and third-party audits.

Experience Requirements:
Experience Requirements

• Minimum 8 years in enterprise infrastructure roles with focus on cloud and hybrid environments.
• Expert knowledge of Azure, AWS, on-prem virtualization (VMware/Hyper-V), and enterprise storage.
• Proven experience in public-sector or similarly regulated environments.
• Hands-on experience with virtualization platforms such as vSphere and ESXi.
• Enterprise networking experience with vendors such as Cisco, Palo Alto, or Fortinet.
• Experience with storage technologies including SAN, NAS, and object storage.
• Strong background in identity and access management.
• Expertise in hybrid cloud networking and security.
• Proficiency with infrastructure automation tools including Terraform, PowerShell, ARM templates, and CloudFormation.
• Strong understanding of CJIS, NIST, or FedRAMP compliance frameworks.
• Demonstrated ability to mentor technical teams and deliver structured training.
• Experience supporting law enforcement, justice, or public safety agencies (preferred).
• Familiarity with RMS, CAD, body camera or evidence systems, or large data ingestion environments (preferred).
• Azure Solutions Architect Expert certification (preferred).
• AWS Certified Solutions Architect - Professional (preferred).
• CISSP, VMware VCAP, or Cisco CCNP/CCIE certifications (preferred).

Education Requirements:
Education Requirements

• Azure Solutions Architect Expert certification (preferred).
• AWS Certified Solutions Architect - Professional (preferred).
• CISSP, VMware VCAP, or Cisco CCNP/CCIE certifications (preferred).