Azure Cloud Security Architect, REMOTE (USC/GC) | W2 |

Job Title: Senior Security Architect (Azure Cloud)
Location: Berkeley Heights, NJ (Onsite)
Duration: 12 Months Contract to Hire
Rate: Up to $95/hr on W2
Work Authorization: USC/GC Only

We are seeking a highly skilled Senior Azure Cloud Security Engineer to join a growing enterprise security team supporting critical cloud infrastructure and application environments. This role requires deep expertise in Azure cloud security, Zero Trust Architecture, DevSecOps, IAM, and compliance-driven environments including FedRAMP/NIST.
The ideal candidate will have strong hands-on experience securing Azure infrastructure, applications, CI/CD pipelines, and hybrid cloud deployments while collaborating closely with Agile and DevOps teams.
Key Responsibilities:

• Design and implement secure Azure cloud architecture solutions
• Lead security architecture reviews and security design recommendations
• Implement and manage Azure security tools including Microsoft Sentinel, Defender for Cloud, Azure Monitor, Key Vault, and Application Gateway
• Build and maintain Zero Trust security models across cloud environments
• Secure Azure DevOps and CI/CD pipelines using DevSecOps best practices
• Implement IAM controls including MFA, SSO, Conditional Access, RBAC, PAM/PIM, and Identity Federation
• Support FedRAMP High and NIST 800-53 compliance initiatives
• Perform vulnerability assessments, remediation, and security hardening
• Collaborate with infrastructure, application, and DevOps teams to integrate security into SDLC
• Support incident response, monitoring, threat detection, and continuous compliance activities
• Assist with hybrid cloud security deployments integrating on-prem and cloud environments

Required Skills:

• 5 years of hands-on Azure Cloud Security experience
• Strong experience with Microsoft Azure security services
• Experience with Azure Sentinel (SIEM/SOAR)
• Experience with Microsoft Defender for Cloud
• Strong understanding of Zero Trust Architecture
• Experience securing Azure DevOps / CI/CD environments
• Expertise in Entra ID / Azure AD, IAM, MFA, SSO, Conditional Access, PAM/PIM
• Experience supporting FedRAMP, NIST 800-53, RMF, or similar compliance frameworks
• Experience with vulnerability management and cloud security posture management
• Strong understanding of Windows/Linux security in cloud environments
• Experience working in enterprise or regulated environments

Preferred Qualifications:

• CISSP, CCSP, CISM certifications
• Microsoft certifications such as AZ-500, SC-100, SC-300
• Experience with CrowdStrike Falcon EDR
• Experience with GovCloud or highly regulated cloud environments
• Experience with hybrid cloud and enterprise-scale deployments

This is an excellent opportunity to work on enterprise-level cloud security initiatives within a highly technical and security-focused environment.