Job Title: Azure Security Architect
Location: Denver CO - Day 1 onsite
Responsibilities:
Architect Secure Azure Solutions: Design and develop comprehensive security architectures for web mobile API and cloud-native applications hosted on Azure.
Azure Cloud Security Leadership: Act as the primary SME for Azure security providing expert guidance on securing IaaS PaaS and SaaS deployments within the Azure ecosystem. This includes deep knowledge of:
Azure Networking Security: NSGs ASGs Azure Firewall WAF (Azure Front Door/Application Gateway) Private Link VPNs ExpressRoute.
Azure Identity & Access Management (IAM): Azure Active Directory (AAD) Conditional Access PIM MFA Hybrid Identity.
Azure Data Protection: Azure Key Vault Azure Storage encryption Azure SQL Database security Azure Disk Encryption.
Azure Security Services: Azure Security Center (Defender for Cloud) Azure Sentinel Azure Policy Azure Monitor Azure DDoS Protection.
Application Security Expertise: Conduct threat modeling security reviews and vulnerability assessments (SAST/DAST) for applications leveraging Azure services to identify and mitigate risks.
Secure SDLC Integration: Drive the adoption of secure coding practices and integrate security automation tools (e.g. Static/Dynamic Application Security Testing) within Azure DevOps CI/CD pipelines.
Security Standards & Policies: Develop and enforce security policies standards and architectural guidelines specifically for Azure deployments ensuring alignment with industry best practices (e.g. OWASP Top 10 Microsoft Security Best Practices CIS Benchmarks for Azure).
Incident Response & Remediation: Collaborate with incident response teams providing architectural insights for investigation and effective remediation of security incidents related to Azure infrastructure and applications.
Consultation & Training: Advise development operations and other IT teams on Azure security best practices emerging threats and secure design patterns.
Technology Evaluation: Research evaluate and recommend new Azure security services and third-party tools to enhance our security posture.
Required Skills & Qualifications:
Bachelors degree in Computer Science Information Security or a related field.
10 years of experience in information security with a strong focus on security architecture.
Proficiency with Azure security services (e.g. Azure Security Center/Defender for Cloud Azure Sentinel Azure Policy AAD Key Vault Network Security Groups Azure Firewall WAF).
Strong understanding of secure software development lifecycle (SSDLC) principles and practices within an Azure DevOps context.
Experience with Infrastructure as Code (IaC) tools (e.g. Azure Resource Manager templates Terraform) and their security implications.
Familiarity with common security frameworks and compliance standards (NIST ISO 27001 SOC 2 GDPR HIPAA PCI DSS) as they apply to Azure environments.
Excellent communication interpersonal and presentation skills with the ability to articulate complex security concepts to technical and non-technical audiences.
Strong analytical and problem-solving abilities
API,AZURE SECURITY,AUTOMATION TOOLS,AZURE SQL,CI/CD,AZURE,IAAS,DATABASE SECURITY,SOFTWARE DEVELOPMENT LIFECYCLE,SAAS