Full-Time Azure Security Architects /DevSecOps

Key Responsibilities:

Architectural Leadership: Lead the design and implementation of secure Azure architectures that meet business needs and comply with security and regulatory requirements.

Security Strategy: Develop and implement security strategies for Azure, including identity and access management, network security, and data protection.

Risk Management: Identify, assess, and mitigate security risks within Azure cloud environments, developing a secure baseline for Azure IaaS, PaaS, and SaaS services.

Compliance and Governance: Ensure cloud security solutions adhere to relevant standards and regulatory compliance requirements (e.g., GDPR, HIPAA, SOC 2, ISO 27001).

DevSecOps Integration: Work closely with DevOps teams to embed security best practices in the CI/CD pipeline and automate security controls.

Incident Response: Design incident detection and response processes for Azure cloud environments, including monitoring, logging, and auditing.

Collaboration: Partner with internal stakeholders, including engineering, IT, and compliance teams, to promote a secure Azure environment.

Documentation: Maintain clear and up-to-date documentation for cloud security processes, policies, and procedures.

Qualifications:

Education: Bachelor's or Master's degree in Computer Science, Information Security, or a related field.

Experience: 12+ years of experience in IT security, with at least 5 years in cloud security architecture.

Certification: Relevant certifications such as Azure Solutions Architect Expert, Certified Information Systems Security Professional (CISSP), or Certified Cloud Security Professional (CCSP) preferred.

Technical Expertise:

Extensive experience with Azure security tools and services, including Azure Security Center, Azure Key Vault, Azure AD, Azure Policy, and Azure Sentinel.

Strong knowledge of network security (firewalls, VPNs, network segmentation) in Azure environments.

Proficiency in scripting and automation (e.g., PowerShell, Python, ARM templates).

Skills:

In-depth understanding of security frameworks (NIST, ISO) and DevSecOps best practices.

Excellent analytical, troubleshooting, and communication skills.

Ability to manage complex projects and work cross-functionally with global teams.

Preferred Skills:

Familiarity with multi-cloud environments (AWS, Google Cloud Platform) and hybrid cloud security solutions.

Experience in microservices security, container security (e.g., Docker, Kubernetes), and serverless architectures.

Knowledge of Infrastructure as Code (IaC) tools such as Terraform or Ansible.