Azure Engineer

Job Summary

Our client, a leading financial services provider, is building a cloud-native immutable evidencing platform to ingest compliance artifacts, audit evidence, and control attestations from a wide range of internal tools via API, store them with cryptographic integrity guarantees, and expose querying and retrieval capabilities to downstream GRC and audit workflows. The contractor will help design, build, and harden this platform on Azure in alignment with PCI-DSS, SOX, and GLBA requirements.

Core Responsibilities

• Design and implement API ingestion pipelines via Azure API Management (APIM) with OAuth2/JWT validation, rate limiting, and schema enforcement
• Build event-driven ingestion workflows using Azure Service Bus and Azure Functions (durable, fan-out patterns)
• Implement immutable artifact storage using Azure Blob Storage with WORM policies (time-based retention locks) and Azure Cosmos DB for tamper-evident metadata indexing
• Architect Redis Cache for high-throughput query caching while preserving source-of-truth immutability guarantees
• Integrate Azure Key Vault for envelope encryption of stored artifacts (customer-managed keys, automated rotation)
• Build Log Analytics Workspace telemetry pipelines covering ingestion events, access audit trails, and integrity verification logs
• Write Terraform IaC for all infrastructure — no click-ops; all resources policy-as-code compliant
• Implement third-party tool integrations (connector APIs) to ingest evidence artifacts from source systems

Required Skills/Experience (Must-Haves)

• Degree in Computer Science, Information Management, or related field preferred
• 5 years building production workloads on Azure; demonstrated experience with event-driven and API-first architectures
• Strong APIM experience: policies (inbound/outbound XML), backends, named values, developer portal, versioning
• Experience implementing immutable/append-only storage patterns — WORM blob policies, Cosmos DB change feed auditing, or equivalent
• Deploy and Manage NoSQL and CosmosDB database experience
• Solid Terraform skills: modules, remote state, Azure Provider, CI/CD integration via GitHub Actions or Azure DevOps
• Strong coding experience in Python and Node
• Familiarity with envelope encryption patterns using Key Vault (CMK, key rotation, purge protection)
• Understanding of zero-trust network design: Private Endpoints, VNet integration, NSG/UDR patterns
• Ability to write KQL for operational queries, alerting rules, and audit log analysis
• Experience integrating with third-party tool APIs (GRC platforms, vulnerability scanners, ticketing systems, or similar)
• Hands-on proficiency with integrated testing tools
• Effective written and verbal communication skills to collaborate with cross-functional teams
• Desired certifications such as Azure Security Engineer Associate certification, and AWS-certified security – Specialty, CISSP and CCSP

Key Competencies & Behaviors

• Architects Scalable & Secure Solutions
• Drives Technical Excellence
• Collaborates Across Technical Domains

Work Environment

• Location: Chicago IL, hybrid 3 days onsite
• Contract: ASAP – 12/31/2206

Compensation & Benefits

• Pay Range: The approximate pay range for this position is between $60.00 and $76.00. Please note that the pay range provided is a good faith estimate. Final compensation may vary based on factors including but not limited to background, knowledge, skills, and location. We comply with local wage minimums.
• Medical, Dental, & Vision Insurance Plans
• Employee-Owned Profit Sharing (ESOP)
• 401K offered

About KellyMitchell

At KellyMitchell, our culture is world class. We’re movers and shakers! We don’t mind a bit of friendly competition, and we reward hard work with unlimited potential for growth. This is an exciting opportunity to join a company known for innovative solutions and unsurpassed customer service. We're passionate about helping companies solve their biggest IT staffing & project solutions challenges. As an employee-owned, women-led organization serving Fortune 500 companies nationwide, we deliver expert service at a moment's notice.

Marketing Disclosure

By applying for this job, you agree to receive calls, AI-generated calls, text messages, or emails from KellyMitchell and its affiliates, and contracted partners. Frequency varies for text messages. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You can reply STOP to cancel and HELP for help. You can access our privacy policy at https://www.careers.kellymitchell.com/privacy-policy