Job description

The Enterprise Architect is responsible for the design authority, technical standards, and target-state architecture that guide how BerryDunn builds and operates business technology across the Microsoft cloud. The role owns the practical application of BerryDunn's architectural principles and standards, with a primary focus on the firm's FY27 AI strategy, evaluation of emerging technology, and the migration of workloads from the on-premises data center to Microsoft Azure. This role is the firm's senior architecture authority for AI-enabled business applications, Azure platform services, Power Platform, and integration patterns. It defines target-state patterns, maintains the standards catalog and architecture decision records, chairs architecture review, and sets production-readiness expectations so that solutions are secure, governed, reusable, and supportable before they reach production. The Enterprise Architect leads the architecture workstream for BerryDunn's move off the on-premises data center: assessing the current estate, defining the Azure landing zone and identity/network baselines, selecting migration and modernization dispositions for each workload, and sequencing waves with the IT Systems, Engineering, Security, and Applications teams. The role also owns the technology radar, evaluating emerging Microsoft and AI capabilities, running structured proof of concept, and recommending what the firm adopts, maintains, or retires. The role partners closely with IT leadership, Security, Infrastructure, Applications, Analytics, Data Engineering and Governance, and the AI Community of Practice, and engage business stakeholders across Tax, Assurance, Audit and Consulting. As the senior subject-matter expert, the Enterprise Architect is expected to coach delivery teams, publish reusable reference architectures, and reduce design rework and one-off solutions. The ideal candidate is a pragmatic, standards-driven technologist and people manager who balances governance with delivery speed, can influence without direct authority, develops and supports team members, and communicates architectural trade-offs, risk, and cost clearly to both technical teams and executive stakeholders. Travel Expectations: This role requires minimal travel, less than 10% per year. Architecture Standards, Principles & Design Authority • Own, maintain, and evolve BerryDunn's architectural principles and standards catalog, including standard identifiers, acceptance criteria, evidence expectations, owners, and review cadence. • Serve as design authority for AI, automation, integration, application, and Microsoft cloud solutions; approve target-state designs and document exceptions with compensating controls. • Chair or lead the architecture review gate so that all significant solutions and AI agents receive documented review, risk tiering, and go/no-go decisions before production. • Maintain architecture decision records, reference architectures, solution patterns, and reusable design assets that reduce rework across teams. • Align architecture work to the firm's TOGAF-based governance model and to enterprise, data, application, and technology architecture domains. AI Strategy, Agentic Solutions & Responsible AI • Provide architectural leadership for the FY27 AI strategy, translating 'govern once, innovate everywhere' into concrete platform, pattern, and control decisions. • Define target-state architecture and standards for Microsoft 365 Copilot, Copilot Studio, Azure AI Foundry, and custom AI services, including when each platform is the right choice. • Set standards for agent design and classification, allowable autonomy, prompt and tool security (including prompt injection and data exfiltration defenses), retrieval design, grounding, evaluation, and monitoring. • Require and validate human-in-the-loop controls and deterministic processing where client financial, regulated, or otherwise sensitive data is involved. • Define AI production-readiness criteria—responsible AI guardrails, content safety, identity and RBAC, network isolation, and diagnostic logging and observability—and verify evidence before pilots scale. • Partner with the AI Hub-and-Spoke governance model, AI Community of Practice, Security, and Risk to keep AI intake, risk tiering, and review paths practical and enforceable. • Advise Spokes and product owners on use-case feasibility, data readiness, cost, and reuse-first delivery so solutions scale rather than proliferate. Azure Migration & Data Center Exit • Lead the architecture workstream for migrating workloads from the on-premises data center to Microsoft Azure, including current-state assessment, dependency mapping, and workload disposition (retire, retain, rehost, replatform, refactor, replace). • Design and govern the Azure landing zone: subscription and management group structure, naming and tagging, identity, network topology, connectivity, and security baselines. • Define migration waves, cutover and rollback approaches, and resiliency, backup, and disaster recovery targets for migrated workloads in partnership with Infrastructure and Systems. • Establish standards for infrastructure as code, environment strategy, CI/CD, and release governance so cloud resources are provisioned consistently and repeatably. • Own and mature FinOps practices for cloud and AI platforms, including cost visibility, tagging and allocation models, right-sizing, licensing and commitment strategy, budget forecasting, showback/chargeback readiness, and ongoing cost optimization. • Reduce and eventually retire on-premises dependencies, including legacy servers, gateways, file services, and end-of-life platforms, in coordination with application owners and vendors. Emerging Technology & Technology Radar • Maintain a technology radar that evaluates emerging Microsoft, AI, data, and automation capabilities and recommends adopt, trial, assess, or hold positions. • Design and run structured proofs of concept and pilots with defined success criteria, risk controls, exit criteria, and business value measures. • Assess vendor and product roadmaps, licensing implications, and platform lifecycle risk; advise on build-versus-buy and platform consolidation decisions. • Translate emerging capability into practical firm roadmap recommendations tied to business outcomes rather than technology for its own sake. Security, Compliance & Risk Alignment • Embed identity-first security in architecture, including Entra ID conditional access baselines, least-privilege RBAC, managed identities, and elimination of key-based access in production. • Ensure designs meet data protection expectations, including sensitivity labeling, container governance, data classification, retention, and DLP alignment. • Require unified auditability and evidentiary logging so solution activity can be reconstructed for audit, incident response, and client assurance needs. • Partner with Security, Risk, Compliance and Data Governance on threat modeling, control evidence packs, and remediation of architectural risk. • Support client, regulatory, and professional-standards obligations relevant to a professional services firm handling confidential and regulated data. Platform & Integration Architecture • Define target-state architecture for Power Platform, including environment strategy, Managed Environments, connector governance, DLP policies, and application lifecycle management. • Establish integration and API standards, including patterns for events, messaging, batch, and real-time integration across cloud and remaining on-premises systems. • Set data platform architecture direction in partnership with the Database and Analytics functions, covering Azure SQL, data pipelines, and analytics and AI data readiness. • Ensure enterprise applications, both custom and vendor-managed, are architected for supportability, upgradeability, and secure integration. Delivery Enablement, Leadership & Communication • Coach project teams through intake, design, implementation, and production readiness, and act as escalation point for complex architectural decisions. • Publish templates, checklists, and reference implementations that make the governed path the easiest path for delivery teams. • Communicate architectural direction, trade-offs, risk, and cost to IT leadership and executive stakeholders in clear business language. • Mentor engineers, analysts, and solution specialists, and build architectural literacy across the technology organization. • Represent architecture in project planning, change advisory, vendor selection, and governance forums. • Serve as a people manager for assigned team members, including setting clear expectations, providing regular coaching and feedback, supporting performance management, guiding professional development, and fostering an inclusive, accountable, and high-performing team culture. • Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field. (Equivalent experience or technical certifications may be considered.) • 10+ years of progressive technology experience, including 5+ years in an enterprise, solution, or principal architect role with accountability for standards and design authority. • Experience managing, coaching, or developing technical staff, including performance conversations, goal setting, workload prioritization, and career development planning. • Demonstrated experience designing and governing solutions on Microsoft Azure, including landing zone design, identity, networking, and security baselines. • Hands-on experience leading or architecting on-premises to Azure migrations, including assessment, workload disposition, wave planning, and cutover. • Practical experience architecting AI solutions on the Microsoft stack, such as Microsoft 365 Copilot, Copilot Studio, Azure AI Foundry, Azure OpenAI, or comparable platforms, including retrieval, grounding, evaluation, and guardrails. • Experience defining and enforcing architecture governance and setting architectural standards. • Experience with Power Platform environment strategy, DLP and connector governance, and application lifecycle management. The base salary range targeted for this role is $160,000 - $180,000. This salary range represents BerryDunn’s good faith and reasonable estimate of the range of possible compensation at the time of posting. If an applicant possesses experience, education, or other qualifications more than the minimum requirements for this posting, that applicant is encouraged to apply, and a final salary range may then be based on those additional qualifications; compensation decisions are dependent on the facts and circumstances of each case. The salary of the finalist selected for this role will be based on a variety of factors, including but not limited to years of experience, depth of experience, seniority, merit, education, training, amount of travel, and other relevant business considerations. Our people are what make BerryDunn special, and in return we strive to support our employees and help them thrive. Eligible employees have access to benefits that go beyond what’s expected to support their physical, mental, career, social, and financial well-being. Visit our website for a complete list of benefits and a look into our culture: Experience BerryDunn . We will ensure that individuals are provided reasonable accommodation to participate in the job application or interview process or perform essential job functions. Please contact careers@berrydunn.com to request an accommodation. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender, gender identity or expression, or veteran status. We are proud to be an equal opportunity workplace. About BerryDunn BerryDunn is the brand name under which Berry, Dunn, McNeil & Parker, LLC and BDMP Assurance, LLP, independently owned entities, provide services. Since 1974, BerryDunn has helped businesses, nonprofits, and government agencies throughout the US and its territories solve their greatest challenges. The firm’s tax, advisory, and consulting services are provided by Berry, Dunn, McNeil & Parker, LLC, and its attest services are provided by BDMP Assurance, LLP, a licensed CPA firm. BerryDunn is a client-centered, people-first professional services firm with a mission to empower the meaningful growth of our people, clients, and communities. The firm has been recognized for its efforts in creating a diverse and inclusive workplace culture, and for its focus on learning, development, and well-being. Learn more at berrydunn.com . #BD_ATA Don’t See A Match For You At This Time? We invite you to join our Talent Connection and let’s stay in touch

Requirements

Must-haves

Travel Expectations: This role requires minimal travel, less than 10% per year.
Architecture Standards, Principles & Design Authority
Own, maintain, and evolve BerryDunn's architectural principles and standards catalog, including standard identifiers, acceptance criteria, evidence expectations, owners, and review cadence.
Serve as design authority for AI, automation, integration, application, and Microsoft cloud solutions; approve target-state designs and document exceptions with compensating controls.
Chair or lead the architecture review gate so that all significant solutions and AI agents receive documented review, risk tiering, and go/no-go decisions before production.
Maintain architecture decision records, reference architectures, solution patterns, and reusable design assets that reduce rework across teams.
Align architecture work to the firm's TOGAF-based governance model and to enterprise, data, application, and technology architecture domains.
AI Strategy, Agentic Solutions & Responsible AI
Provide architectural leadership for the FY27 AI strategy, translating 'govern once, innovate everywhere' into concrete platform, pattern, and control decisions.
Define target-state architecture and standards for Microsoft 365 Copilot, Copilot Studio, Azure AI Foundry, and custom AI services, including when each platform is the right choice.
Set standards for agent design and classification, allowable autonomy, prompt and tool security (including prompt injection and data exfiltration defenses), retrieval design, grounding, evaluation, and monitoring.
Require and validate human-in-the-loop controls and deterministic processing where client financial, regulated, or otherwise sensitive data is involved.
Define AI production-readiness criteria—responsible AI guardrails, content safety, identity and RBAC, network isolation, and diagnostic logging and observability—and verify evidence before pilots scale.
Partner with the AI Hub-and-Spoke governance model, AI Community of Practice, Security, and Risk to keep AI intake, risk tiering, and review paths practical and enforceable.
Advise Spokes and product owners on use-case feasibility, data readiness, cost, and reuse-first delivery so solutions scale rather than proliferate.
Azure Migration & Data Center Exit
Design and govern the Azure landing zone: subscription and management group structure, naming and tagging, identity, network topology, connectivity, and security baselines.
Define migration waves, cutover and rollback approaches, and resiliency, backup, and disaster recovery targets for migrated workloads in partnership with Infrastructure and Systems.
Establish standards for infrastructure as code, environment strategy, CI/CD, and release governance so cloud resources are provisioned consistently and repeatably.
Reduce and eventually retire on-premises dependencies, including legacy servers, gateways, file services, and end-of-life platforms, in coordination with application owners and vendors.
Emerging Technology & Technology Radar
Maintain a technology radar that evaluates emerging Microsoft, AI, data, and automation capabilities and recommends adopt, trial, assess, or hold positions.
Design and run structured proofs of concept and pilots with defined success criteria, risk controls, exit criteria, and business value measures.
Assess vendor and product roadmaps, licensing implications, and platform lifecycle risk; advise on build-versus-buy and platform consolidation decisions.

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aiazuregoci/cdapisql

Platform: icims
Effort: medium

Benefits

Benefits detected in the listing.

Vision

Professional Development