Enterprise Architect

Overview

The Enterprise Architect is responsible for the design authority, technical standards, and target-state architecture that guide how BerryDunn builds and operates business technology across the Microsoft cloud. The role owns the practical application of BerryDunn's architectural principles and standards, with a primary focus on the firm's FY27 AI strategy, evaluation of emerging technology, and the migration of workloads from the on-premises data center to Microsoft Azure.

This role is the firm's senior architecture authority for AI-enabled business applications, Azure platform services, Power Platform, and integration patterns. It defines target-state patterns, maintains the standards catalog and architecture decision records, chairs architecture review, and sets production-readiness expectations so that solutions are secure, governed, reusable, and supportable before they reach production.

The Enterprise Architect leads the architecture workstream for BerryDunn's move off the on-premises data center: assessing the current estate, defining the Azure landing zone and identity/network baselines, selecting migration and modernization dispositions for each workload, and sequencing waves with the IT Systems, Engineering, Security, and Applications teams. The role also owns the technology radar, evaluating emerging Microsoft and AI capabilities, running structured proof of concept, and recommending what the firm adopts, maintains, or retires.

The role partners closely with IT leadership, Security, Infrastructure, Applications, Analytics, Data Engineering and Governance, and the AI Community of Practice, and engage business stakeholders across Tax, Assurance, Audit and Consulting. As the senior subject-matter expert, the Enterprise Architect is expected to coach delivery teams, publish reusable reference architectures, and reduce design rework and one-off solutions.

The ideal candidate is a pragmatic, standards-driven technologist and people manager who balances governance with delivery speed, can influence without direct authority, develops and supports team members, and communicates architectural trade-offs, risk, and cost clearly to both technical teams and executive stakeholders.

Travel Expectations

This role requires minimal travel, less than 10% per year.

You Will

Architecture Standards, Principles & Design Authority

• Own, maintain, and evolve BerryDunn's architectural principles and standards catalog, including standard identifiers, acceptance criteria, evidence expectations, owners, and review cadence.
• Serve as design authority for AI, automation, integration, application, and Microsoft cloud solutions; approve target-state designs and document exceptions with compensating controls.
• Chair or lead the architecture review gate so that all significant solutions and AI agents receive documented review, risk tiering, and go/no-go decisions before production.
• Maintain architecture decision records, reference architectures, solution patterns, and reusable design assets that reduce rework across teams.
• Align architecture work to the firm's TOGAF-based governance model and to enterprise, data, application, and technology architecture domains.

AI Strategy, Agentic Solutions & Responsible AI

• Provide architectural leadership for the FY27 AI strategy, translating 'govern once, innovate everywhere' into concrete platform, pattern, and control decisions.
• Define target-state architecture and standards for Microsoft 365 Copilot, Copilot Studio, Azure AI Foundry, and custom AI services, including when each platform is the right choice.
• Set standards for agent design and classification, allowable autonomy, prompt and tool security (including prompt injection and data exfiltration defenses), retrieval design, grounding, evaluation, and monitoring.
• Require and validate human-in-the-loop controls and deterministic processing where client financial, regulated, or otherwise sensitive data is involved.
• Define AI production-readiness criteria—responsible AI guardrails, content safety, identity and RBAC, network isolation, and diagnostic logging and observability—and verify evidence before pilots scale.
• Partner with the AI Hub-and-Spoke governance model, AI Community of Practice, Security, and Risk to keep AI intake, risk tiering, and review paths practical and enforceable.
• Advise Spokes and product owners on use-case feasibility, data readiness, cost, and reuse-first delivery so solutions scale rather than proliferate.

Azure Migration & Data Center Exit

Lead the architecture workstream for migrating workloads from the on-premises data center to Microsoft Azure, including current-state assessment, dependency mapping, and workload disposition (retire, retain, rehost, replatform, refactor, replace).

Design and govern the Azure landing zone: subscription and management group structure, naming and tagging, identity, network topology, connectivity, and security baselines.

Define migration waves, cutover and rollback approaches, and resiliency, backup, and disaster recovery targets for migrated workloads in partnership with Infrastructure and Systems.

Establish standards for infrastructure as code, environment strategy, CI/CD, and release governance so cloud resources are provisioned consistently and repeatably.

Own and mature FinOps practices for cloud and AI platforms, including cost visibility, tagging and allocation models, right-sizing, licensing and commitment strategy, budget forecasting, showback/chargeback readiness, and ongoing cost optimization.

Reduce and eventually retire on-premises dependencies, including legacy servers, gateways, file services, and end-of-life platforms, in coordination with application owners and vendors.

Emerging Technology & Technology Radar

• Maintain a technology radar that evaluates emerging Microsoft, AI, data, and automation capabilities and recommends adopt, trial, assess, or hold positions.
• Design and run structured proofs of concept and pilots with defined success criteria, risk controls, exit criteria, and business value measures.
• Assess vendor and product roadmaps, licensing implications, and platform lifecycle risk; advise on build-versus-buy and platform consolidation decisions.
• Translate emerging capability into practical firm roadmap recommendations tied to business outcomes rather than technology for its own sake.

Security, Compliance & Risk Alignment

• Embed identity-first security in architecture, including Entra ID conditional access baselines, least-privilege RBAC, managed identities, and elimination of key-based access in production.
• Ensure designs meet data protection expectations, including sensitivity labeling, container governance, data classification, retention, and DLP alignment.
• Require unified auditability and evidentiary logging so solution activity can be reconstructed for audit, incident response, and client assurance needs.
• Partner with Security, Risk, Compliance and Data Governance on threat modeling, control evidence packs, and remediation of architectural risk.
• Support client, regulatory, and professional-standards obligations relevant to a professional services firm handling confidential and regulated data.

Platform & Integration Architecture

• Define target-state architecture for Power Platform, including environment strategy, Managed Environments, connector governance, DLP policies, and application lifecycle management.
• Establish integration and API standards, including patterns for events, messaging, batch, and real-time integration across cloud and remaining on-premises systems.
• Set data platform architecture direction in partnership with the Database and Analytics functions, covering Azure SQL, data pipelines, and analytics and AI data readiness.
• Ensure enterprise applications, both custom and vendor-managed, are architected for supportability, upgradeability, and secure integration.

Delivery Enablement, Leadership & Communication

Coach project teams thro