Cybersecurity Architect - REMOTE

Identity and Access Security: Microsoft Entra ID, Conditional Access, MFA, PIM, and PAW. Network Security: Azure Firewall, DDoS Protection, NSGs, Application Gateway (WAF), Private Link, and Hub-Spoke Topology. Data Security: Azure Key Vault, TDE, Always Encrypted, and Confidential Computing. Threat Detection: Defender for Cloud, Endpoint and Identity Design Zero Trust-aligned architectures based on the Azure Security Benchmark, Cloud Adoption Framework (CAF), and Microsoft’s Enterprise-Scale Reference Architectures. Embed “security by design” into DevOps and CI/CD pipelines using automation, policy-as-code, and continuous compliance. Integration and Collaboration Partner with Enterprise Architecture and DevOps teams to implement security within Azure DevOps and GitHub pipelines. Collaborate with external Managed Detection and Response partners to align detection, response, and identity/device security practices. Governance, Risk, and Compliance (GRC) Develop and maintain cloud security governance frameworks aligned to NIST Cybersecurity Framework, Azure Security Benchmark, and CIS Controls. Define and enforce Azure Policy and Blueprints for compliance automation and regulatory reporting (NIST 800-53, ISO 27001, SOC 2, etc.). Lead security risk assessments and threat modeling for new Azure workloads and services. Support audits, remediation plans, and continuous improvement of Microsoft Secure Score and overall maturity. Innovation and Continuous Improvement Evaluate emerging Azure and AI-based security technologies to strengthen detection, response, and automation. Drive architecture improvements that reduce vulnerabilities, minimize attack surface, and optimize cloud posture. Promote best practices through documentation, training, and architecture reviews. Qualifications Bachelor’s degree in Information Security, Computer Science, or related field. 7+ years of experience in cybersecurity architecture. Deep expertise in Azure-native security services and Zero Trust design. Hands-on experience with Defender for Cloud, Azure Policy, Entra ID, and Azure Firewall. Certifications preferred: CISSP Microsoft Certified: Cybersecurity Architect Expert (SC-100) Microsoft Certified: Azure Solutions Architect Expert (AZ-305) Strong understanding of NIST CSF, CIS Controls, and Cloud Adoption Framework Job Type: Contract Pay: $75.00 - $80.00 per hour Experience: Cybersecurity Architect: 7 years (Required) License/Certification: CISSP or relavant (Required) Work Location: Remote