Azure Cloud Security Architect

Highbridge Consulting LLC
  • Paramus, NJ
  • Instant Apply
2 days ago

Job Description

Our client is looking for an Azure Cloud Security Architect to support the migration of the acquired company's Azure environment and Databricks platform into the Client environment in King of Prussia, PA (Hybrid) office
The primary focus will be Azure cloud security, vulnerability remediation, cloud security posture, data security, and securing Azure Databricks environments.
This person will work closely with cloud, infrastructure, security, and legacy teams to identify security issues, coordinate remediation, and ensure the new environment meets Client's security standards.

Key Responsibilities
1. Azure Cloud Security & Architecture
  • Review Azure cloud architecture from a security perspective.
  • Identify and help remediate critical and high-severity vulnerabilities.
  • Review security across:
    • Azure
    • On-premises data centers
    • Active Directory / Entra ID
  • Coordinate with existing teams to resolve security issues and perform follow-up scans.
2. Infrastructure-as-Code & Penetration Testing
  • Perform security reviews/scans of Infrastructure-as-Code (IaC).
  • Review Azure security findings from penetration testing.
  • Work with technical teams to remediate critical/high vulnerabilities.
  • Validate that vulnerabilities have been successfully resolved.
3. Cloud Security Posture Management
  • Implement and work with CrowdStrike CSPM.
  • Perform cloud security posture assessments.
  • Prioritize and remediate critical security findings.
  • Retest environments after remediation.
  • Support integration of CrowdStrike Falcon Shield for the Azure Jump Domain.
4. Data Security
  • Use Cyera to scan data repositories for security and exposure risks.
  • Identify data security issues and coordinate remediation.
  • Support data-volume expansion required for migration pipelines.
5. Azure Databricks Security
A major part of the role will be securing the Azure Databricks environment.
Responsibilities include:
  • Ensure Databricks is deployed using a private and secure architecture.
  • Validate:
    • VNet Injection
    • Secure Cluster Connectivity
    • No public IP addresses
    • Private Endpoints
    • Private DNS
  • Review and govern Entra ID / IAM access for:
    • Databricks workspaces
    • Unity Catalog
    • Service Principals
    • Managed Identities
  • Ensure approved external integrations use centralized Azure Firewall routing.
  • Support security logging and retention requirements.
  • Review and document security exceptions, including TLS inspection exceptions.
  • Coordinate required security approvals and documentation through ServiceNow.

Numbers & Facts

LocationParamus, NJ

Skills

  • Cisco Unityunmatched
  • Cloud Architectureunmatched
  • Cloud Computingunmatched
  • Computer Securityunmatched
  • DNS (Domain Name System)unmatched
  • Establish Prioritiesunmatched
  • Firewallsunmatched
  • IP (Internet Protocol)unmatched
  • Identify Issuesunmatched
  • Identity Data Managementunmatched
  • Information/Data Security (InfoSec)unmatched
  • Injectionsunmatched
  • Microsoft Active Directoryunmatched
  • Microsoft Windows Azureunmatched
  • Network Operations Centerunmatched
  • Penetration Testingunmatched
  • Problem Solving Skillsunmatched
  • SSL-TLS (Secure Socket Layer - Transport Layer Security)unmatched
  • Security Analysisunmatched
  • Security Architectureunmatched
  • Security Attacksunmatched
  • Team Playerunmatched

Be found by employers

5,500+ employers search our resume database daily. Add yours to get found by recruiters looking for candidates like you.

Level up your application

Professional resume templates

Browse dozens of recruiter approved resume templates, layouts and formats. Choose your favorite and make it your own in minutes.

Free resume templates

Resume Builder

Improve your existing resume or start from scratch and create a standout, ATS-friendly resume. Add job-specific content, download and apply.

Resume Builder