Azure Cloud Security Architect
About The Position
The Azure Cloud Security Architect will support the migration of an acquired company's Azure environment and Databricks platform into the client's environment. The role is based in the client's King of Prussia, Pennsylvania office with a hybrid work arrangement and flexible work-from-home options. The primary focus is Azure cloud security, vulnerability remediation, cloud security posture, data security, and securing Azure Databricks environments. The architect will work closely with cloud, infrastructure, security, and legacy teams to identify security issues, coordinate remediation, and ensure the new environment meets the client's security standards.
Responsibilities
- Review Azure cloud architecture from a security perspective.
- Identify and help remediate critical and high-severity vulnerabilities across Azure, on-premises data centers, and Active Directory / Entra ID.
- Coordinate with existing teams to resolve security issues and perform follow-up scans.
- Perform security reviews and scans of Infrastructure-as-Code (IaC).
- Review Azure security findings from penetration testing, work with technical teams on remediation, and validate that vulnerabilities have been resolved.
- Implement and work with CrowdStrike CSPM.
- Perform cloud security posture assessments, prioritize and remediate critical findings, and retest environments after remediation.
- Support integration of CrowdStrike Falcon Shield for the Azure Jump Domain.
- Use Cyera to scan data repositories for security and exposure risks, identify data security issues, and coordinate remediation.
- Support data-volume expansion required for migration pipelines.
- Secure the Azure Databricks environment and ensure it uses a private and secure architecture.
- Validate Databricks VNet Injection, Secure Cluster Connectivity, absence of public IP addresses, Private Endpoints, and Private DNS.
- Review and govern Entra ID / IAM access for Databricks workspaces, Unity Catalog, Service Principals, and Managed Identities.
- Ensure approved external integrations use centralized Azure Firewall routing.
- Support security logging and retention requirements.
- Review and document security exceptions, including TLS inspection exceptions.
- Coordinate required security approvals and documentation through ServiceNow.
Benefits
- Flexible work-from-home options
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Education Level
No Education Listed
