About the position
Looking for Azure Cloud Security Architect. The person should have good understanding in system threat modeling. Experience performing threat modeling and design reviews to assess security implications and mitigating controls for the security solutions. Should be good in documenting, taking the screen shots of the system and able to deliver quality security documents of the system. Should have very good understanding of cyber security related concepts (Just example the way Authorization and Authorization work etc.,). Because this understanding is necessary to deliver quality documents. He may not have system design skills of security but should be able to understand the existing system and able to manage the operations. Shall have experience on security monitoring on platform and application level. Expertise in Azure security, in-depth understanding of their service catalogs, security offerings and automation opportunities. Deep experience on implementing security controls on AKS Cluster, Active Directory, MFA, API’s and ADB2C. Experience on control plane and data plane security implementation. Good knowledge on zero trust security architecture. Knowledge and implementation experience on mTLS and azure managed identity.
Responsibilities
- Perform threat modeling and design reviews to assess security implications and mitigating controls.
- Document and deliver quality security documents of the system.
- Understand and manage existing systems operations.
- Monitor security on platform and application levels.
- Implement security controls on AKS Cluster, Active Directory, MFA, API’s and ADB2C.
- Implement control plane and data plane security.
- Apply zero trust security architecture principles.
- Implement mTLS and azure managed identity.
Requirements
- Good understanding of system threat modeling.
- Experience in threat modeling and design reviews.
- Strong documentation skills.
- Understanding of cyber security concepts.
- Experience in security monitoring.
- Expertise in Azure security and service catalogs.
- Deep experience in implementing security controls.
- Knowledge of zero trust security architecture.
- Experience with mTLS and azure managed identity.
Nice-to-haves
- Experience with Security Risk Management Plan.
- Familiarity with Cybersecurity Bill of Material.
- Knowledge of threat modeling approaches.
- Experience in asset identification and application overview.
- Ability to decompose applications and identify threats.
- Experience with threat mapping (STRIDE).
- Knowledge of risk rating and tools.
- Experience with security risk analysis (CVSS 3.0 / 3.1).
- Familiarity with security verification and validation activities.
- Experience with residual security risk analysis.
- Ability to create traceability matrices.
- Experience in preparing security risk management reports.
