Azure Cloud Security Architect

Job Title: Azure Cloud Security Architect

Duration: 3-month contract

Location: Milwaukee, WI Hybrid OR Will also consider King of Prussia PA as a backup location.

• Cloud Architecture & Vulnerability Baseline: Finalize Azure architecture security reviews and coordinate with legacy Enviri teams to remediate critical/high vulnerabilities from the security baseline. Rescan hosting and identity surfaces (Azure, on-premises datacenters, Active Directory) transitioning to Veolia.
• IaC & Pentest Remediation: Perform static security scans on Azure AD Infrastructure as Code (IaC) codebases. Coordinate remediation of critical/high vulnerabilities identified from Azure penetration testing.
• Cloud Posture (CSPM) & SaaS Protection: Implement Crowd Strike CSPM, execute posture vulnerability testing, remediate critical findings, and retest post-remediation. Integrate Falcon Shield for the Azure Jump Domain.
• Data Security & Repository Protection: Scan data repositories using Cyera, coordinate data volume tier expansions for migration pipelines, and remediate data exposure findings.
• Azure Databricks Security & Governance: Review and secure approval for the TLS inspection exception (including risk documentation, compensating controls, and Service Now sign-off); validate private-by-design architecture (enforcing VNet injection, Secure Cluster Connectivity with no public IPs, private endpoints, and private DNS); coordinate GSOC logging ingestion and retention policies (such as 90-day blob storage retention prior to full GSOC integration); oversee Entra  IAM access governance for Databricks work spaces, Unity Catalog, service principals, and managed identities;
  
  and ensure centralized egress routing via Azure Firewall for all approved external integrations.