Remote Azure Security Cloud Service Architect

Summary

The job description is for an Azure Security Consultant role that requires 3-5 years of experience in Azure Cloud Security Analyst/Engineer, with a focus on enhancing the security posture on the Azure platform. The role involves defining program scope, developing future state Azure Security framework, creating roadmaps, obtaining stakeholder consensus, and more. The position reports directly to the vice CISO.

Requirements

• 3 - 5 years) Azure Cloud Security Analyst/Engineer
• In depth knowledge of data platforms like Snowflake and Databricks
• Understanding Azure architecture, resources and cloud and cloud security pattern
• Defender for Cloud, Defender for Endpoints (Servers, Storage, Containers, Key Vaults)
• Azure Monitoring, Azure Active Directory, Azure Sentinel
• Azure Policy, Azure firewall/WAF/Network Security groups
• Coordinate the security activities associated with our Azure security practice
• Manage Azure Policy and Blueprints to detect, alert and remediate controls that are non-compliant to required regulatory standards
• Expert use of runbooks, flows, playbooks and/or logic apps to automatically remediate resources and controls that do not meet security or compliance baselines
• Clear Security documentation and diagrams should be standard protocol
• Build automation and orchestration of Security infrastructure
• Lead security and quality code scanning and remediation at the code promotion gates
• Continually improve Azure Sentinel SOC/SIEM service with accurate rules and playbooks
• Passion for security, automation, performance, and reliability
• 10+ years of experience in Information Security
• 3+ years proven Microsoft Azure Cloud security experience
• 3+ years of experience with Microsoft Cybersecurity tools, including Azure Sentinel, Defender ATP, Cloud App Security, Data Classification, Data Loss Protection, Information Protection, M365 Compliance and M365 Protection
• Proficiency in cryptographic protocols and cipher suites
• IAM custom JSON roles and roles-based access control best practice experience
• Technical experience in administering a Cloud PKI infrastructure with CA and Certificate issuance
• Experience with DevOps workflow tools like Jenkins and Gitlab
• Bachelor's degree or equivalent experience in Computer Science

Responsibilities

• Define program scope and problem statements
• Document current state for process and technologies currently being deployed to address security posture on the Azure platform
• Develop future state Azure Security framework
• Document roles and responsibilities
• Develop roadmap and business case including funding estimates
• Facilitate obtaining stakeholder consensus
• Create program charter
• Validate current controls and IT risk management
• Create 2-year Azure Security program roadmap

Preferred Qualifications

• Cybersecurity certifications such as CISSP, CISM, vendor certifications, etc
• 1 - 3 years overall experience in Public Key Infrastructure (PKI), Digital Certificates (user and device based), Secure Shell (SSH), Transport Layer Security (TLS), Hardware Security Modules (HSM), Key Management Lifecycle (Generation, Deployment and Revocation), Information / Digital Rights Management, Transparent Database Encryption (TDE), Storage and Messaging Encryption
• 1 - 2 years overall experience in IT infrastructure and networking administration
• 1 - 2 years overall experience in network and platform security
• Cybersecurity certifications such as CISSP, CISM, vendor certifications, etc