Azure Cloud Security Architect

Job Title: Azure Cloud Security Architect

Duration: 3 month contract

Location: Milwaukee, WI Hybrid

Pay: $125-130/hr

This role will support cloud security, vulnerability remediation, infrastructure protection, and governance throughout the transition.

Key Responsibilities

• Cloud Architecture & Vulnerability Baseline: Finalize Azure architecture security reviews and coordinate with legacy infrastructure teams to remediate critical/high vulnerabilities identified in the security baseline. Rescan hosting and identity environments (Azure, on-premises datacenters, and Active Directory) transitioning to the new organization.

• IaC & Penetration Testing Remediation: Perform static security scans on Azure AD Infrastructure as Code (IaC) codebases. Coordinate remediation of critical/high vulnerabilities identified through Azure penetration testing.

• Cloud Security Posture Management (CSPM) & SaaS Protection: Implement CrowdStrike CSPM, conduct posture vulnerability testing, remediate critical findings, and perform post-remediation testing. Integrate Falcon Shield for the Azure Jump Domain.

• Data Security & Repository Protection: Scan data repositories using Cyera, coordinate data volume tier expansions for migration pipelines, and remediate identified data exposure vulnerabilities.

•

Azure Databricks Security & Governance:

• Review and secure approval for TLS inspection exceptions, including risk documentation, compensating controls, and ServiceNow sign-off.

• Validate private-by-design architecture, enforcing VNet injection, Secure Cluster Connectivity (no public IPs), private endpoints, and private DNS.

• Coordinate GSOC logging ingestion and retention policies, including 90-day blob storage retention before full GSOC integration.

• Oversee Entra ID and IAM access governance for Databricks workspaces, Unity Catalog, service principals, and managed identities.

• Ensure centralized egress routing through Azure Firewall for all approved external integrations.