Azure Cloud Security Architect

Job Title:Azure Cloud Security Architect
Duration
: 3 month contract
Location
:

Milwaukee, WI Hybrid
Pay
: $125-130/hr

This role will support cloud security, vulnerability remediation, infrastructure protection, and governance throughout the transition.

• Cloud Architecture & Vulnerability Baseline: Finalize Azure architecture security reviews and coordinate with legacy infrastructure teams to remediate critical/high vulnerabilities identified in the security baseline. Rescan hosting and identity environments (Azure, on-premises datacenters, and Active Directory) transitioning to the new organization.

• IaC & Penetration Testing Remediation: Perform static security scans on Azure AD Infrastructure as Code (IaC) codebases. Coordinate remediation of critical/high vulnerabilities identified through Azure penetration testing.

• Cloud Security Posture Management (CSPM) & SaaS Protection: Implement Crowd Strike CSPM, conduct posture vulnerability testing, remediate critical findings, and perform post-remediation testing. Integrate Falcon Shield for the Azure Jump Domain.

• Data Security & Repository Protection: Scan data repositories using Cyera, coordinate data volume tier expansions for migration pipelines, and remediate identified data exposure vulnerabilities.

• Azure Databricks Security & Governance:

  • Review and secure approval for TLS inspection exceptions, including risk documentation, compensating controls, and Service Now sign-off.

  • Validate private-by-design architecture, enforcing VNet injection, Secure Cluster Connectivity (no public IPs), private endpoints, and private DNS.

  • Coordinate GSOC logging ingestion and retention policies, including 90-day blob storage retention before full GSOC integration.

  • Oversee Entra  IAM access governance for Databricks work spaces, Unity Catalog, service principals, and managed identities.

  • Ensure centralized egress routing through Azure Firewall for all approved external integrations.