Senior Cloud Security Architect; Azure

Job Summary

We are seeking a highly experienced Senior Cloud Security Architect with deep expertise in Microsoft Azure security to lead the design, implementation, and governance of secure cloud architectures. This role is responsible for defining Azure security strategy, embedding security across cloud platforms and Dev Ops pipelines, and ensuring compliance with regulatory and industry standards. The ideal candidate will be a hands‑on security architect who can work closely with engineering, infrastructure, and compliance teams while owning cloud security architecture end‑to‑end.

• Design and lead enterprise Azure cloud security architecture across applications, data, and infrastructure
• Define and enforce Zero Trust security architecture within Azure environments
• Implement and manage Azure security controls using:
  • Microsoft Defender for Cloud
  • Azure Security Center
  • Microsoft Sentinel (SIEM)
  • Azure IAM / Entra  (Azure AD)
• Architect and secure Azure networking components including:
  • Virtual Networks (VNETs)
  • Network Security Groups (NSGs)
  • Azure Firewall, Web Application Firewall (WAF)
  • VPN and Express Route
• Lead Dev Sec Ops  integration within Azure Dev Ops and Git Hub Actions pipelines
• Design and implement data protection strategies, including encryption, Key Vault, and secrets management
• Conduct cloud risk assessments, threat modeling, and security audits
• Ensure cloud environments comply with regulatory frameworks such as:
  • NIST
  • ISO 27001
  • SOC 2
  • HIPAA
  • GDPR
• Collaborate with engineering, infrastructure, and compliance stakeholders
• Lead incident response, security monitoring, and cloud security automation initiatives

• 10+ years of experience in IT and cybersecurity with a strong focus on Azure Cloud Security
• Deep hands‑on expertise with the Microsoft Azure security ecosystem, including:
  • Microsoft Defender for Cloud
  • Microsoft Sentinel (SIEM)
  • Entra  (Azure AD)
  • Azure Firewall, WAF, NSGs
• Strong knowledge of:
  • Identity & Access Management (IAM)
  • Network security and segmentation
  • Encryption and key management
• Experience securing containerized environments (AKS, Kubernetes, Docker)
• Hands‑on experience implementing Dev Sec Ops  pipelines
• Strong understanding of cloud governance, risk, and compliance

• AZ-500 Azure Security Engineer Associate
• SC-100 Microsoft Cybersecurity Architect
• CISSP, CCSP, or CISM

• Infrastructure-as-Code experience with Terraform, ARM Templates, or Bicep
• Automation scripting using Python or Power Shell
• Experience with cloud security posture management (CSPM) tools such as:
  • Wiz
  • Prisma Cloud
  • Lacework
  • Crowd Strike
• Prior experience working in regulated industries (Healthcare, Financial Services, Government)

• Senior, hands‑on Cloud Security Architect, not just advisory
• Strong leadership and cross‑team collaboration skills
• Comfortable owning security strategy and execution
• Proactive, detail‑oriented, and compliance‑focused