Azure Cloud Architect

Role Overview

Azure Solutions Architect with Cybersecurity Specialization

Key Responsibilities

• Solution Architecture Design & Strategy

  Lead the design and architecture of

  end-to-end Azure solutions

  , ensuring alignment with business objectives. Work across cloud infrastructure (compute, storage, networking) and cloud-native services while embedding security at every layer of the architecture.

• Cybersecurity Integration

  Integrate

  cybersecurity best practices

  into cloud designs by leveraging Azures native security tools and services such as

  Azure Security Center

  ,

  Azure Sentinel

  ,

  Azure Active Directory (AAD)

  ,

  Azure Firewall

  , and

  Azure Key Vault

  . Implement role-based access controls (RBAC), secure data management, and encryption strategies.

• Identity & Access Management

  Design and implement

  Azure Active Directory

  strategies, including

  Conditional Access

  policies,

  Multi-Factor Authentication (MFA)

  , and

  Identity Protection

  . Ensure proper identity management and access control for all users and services in the Azure environment.

• Security & Compliance Management

  Architect cloud environments that adhere to global and industry-specific standards such as

  GDPR

  ,

  HIPAA

  ,

  PCI-DSS

  , and

  SOC 2

  . Leverage

  Azure Policy

  ,

  Azure Blueprints

  , and

  Compliance Manager

  to enforce governance and compliance in Azure environments.

• Threat Detection & Prevention

  Implement proactive security measures for threat detection and prevention using

  Azure Sentinel

  (SIEM),

  Microsoft Defender for Cloud

  , and

  Azure DDoS Protection

  . Monitor and respond to security alerts to mitigate risks.

• Cloud Security Posture Management (CSPM)

  Continuously assess the

  cloud security posture

  and implement solutions for continuous monitoring, automated remediation, and threat mitigation using tools like

  Azure Security Center

  and

  Microsoft Defender for Cloud

  .

• Network Security Architecture

  Design

  secure network architectures

  using

  Azure Virtual Networks (VNet)

  ,

  Network Security Groups (NSG)

  ,

  Azure Firewall

  ,

  Application Gateway

  , and

  Azure Bastion

  to secure inbound and outbound traffic and ensure that data transfers are encrypted.

• Disaster Recovery & Business Continuity

  Implement

  disaster recovery

  (DR) strategies and

  business continuity

  plans using

  Azure Site Recovery

  ,

  Azure Backup

  , and other Azure-native solutions. Ensure the architecture supports

  high availability

  and

  resilience

  .

• Incident Response & Remediation

  Lead incident response efforts in the event of a security breach. Implement procedures for rapid detection, containment, and remediation of security vulnerabilities.

• Collaboration & Stakeholder Management

  Collaborate with key stakeholders, including development, operations, security, and compliance teams, to define solution architectures. Provide guidance and training to teams on Azure security best practices and threat mitigation techniques.

• Documentation & Knowledge Sharing

  Maintain up-to-date technical documentation for architecture designs, security configurations, and deployment processes. Share knowledge of emerging cybersecurity threats and solutions to improve the overall security posture.

• Legal Matters

  ,

  Coordinating with Infosec team regarding security events.

• Forensic Methods in identifying root cause, Containments Method to isolate infected resources.

Required Qualifications & Skills

• Bachelors degree

  in Computer Science, Cybersecurity, Information Technology, or related field, or equivalent work experience.

• 10+ years

  of experience in cloud architecture, with a focus on Azure solutions.
• In-depth knowledge of

  Azure services

  and security tools, including

  Azure Active Directory

  ,

  Azure Security Center

  ,

  Azure Sentinel

  ,

  Microsoft Defender for Cloud

  ,

  Azure Key Vault

  , and

  Azure Firewall

  .
• Strong understanding of

  cloud security concepts

  such as identity management, encryption, access control, and threat mitigation in an Azure environment.
• Expertise in implementing

  compliance and governance frameworks

  within Azure (e.g.,

  Azure Policy

  ,

  Azure Blueprints

  ,

  Azure Compliance Manager

  ).
• Solid experience with

  network security

  in the cloud, including

  Virtual Networks

  ,

  Network Security Groups (NSG)

  ,

  Application Gateway

  , and

  Azure Firewall

  .
• Experience in

  Identity and Access Management (IAM)

  , including configuration of

  RBAC

  ,

  MFA

  , and

  conditional access

  in

  Azure Active Directory

  .
• Proficiency in

  Infrastructure as Code (IaC)

  using tools like

  Terraform

  ,

  Azure ARM Templates

  , or

  Bicep

  to automate security configuration and cloud deployments.
• Hands-on experience with

  cybersecurity threat detection

  using tools like

  Azure Sentinel

  and

  Microsoft Defender for Cloud

  .
• Ability to troubleshoot and resolve complex security and network issues in an Azure environment.
• Strong communication skills, including the ability to document and communicate complex architectural and security concepts to stakeholders at all levels.