Azure Cloud Security Architect

Job Title: Azure Cloud Security Architect
Duration: 3 month contract
Location: Milwaukee, WI Hybrid
Pay: $125-130/hr

This role will support cloud security, vulnerability remediation, infrastructure protection, and governance throughout the transition.

• Cloud Architecture & Vulnerability Baseline: Finalize Azure architecture security reviews and coordinate with legacy infrastructure teams to remediate critical/high vulnerabilities identified in the security baseline. Rescan hosting and identity environments (Azure, on-premises datacenters, and Active Directory) transitioning to the new organization.

• IaC & Penetration Testing Remediation: Perform static security scans on Azure AD Infrastructure as Code (IaC) codebases. Coordinate remediation of critical/high vulnerabilities identified through Azure penetration testing.

• Cloud Security Posture Management (CSPM) & SaaS Protection: Implement CrowdStrike CSPM, conduct posture vulnerability testing, remediate critical findings, and perform post-remediation testing. Integrate Falcon Shield for the Azure Jump Domain.

• Data Security & Repository Protection: Scan data repositories using Cyera, coordinate data volume tier expansions for migration pipelines, and remediate identified data exposure vulnerabilities.

• Azure Databricks Security & Governance:

  • Review and secure approval for TLS inspection exceptions, including risk documentation, compensating controls, and ServiceNow sign-off.

  • Validate private-by-design architecture, enforcing VNet injection, Secure Cluster Connectivity (no public IPs), private endpoints, and private DNS.

  • Coordinate GSOC logging ingestion and retention policies, including 90-day blob storage retention before full GSOC integration.

  • Oversee Entra ID and IAM access governance for Databricks workspaces, Unity Catalog, service principals, and managed identities.

  • Ensure centralized egress routing through Azure Firewall for all approved external integrations.