What are the responsibilities and job description for the Cloud Security Consultant position at WorkNovas LLC?
Role: Cloud Security Consultant
Client Location: Phoenix, AZ 85054 (Hybrid role)
Duration: 6 months
Assessment and video screening
Responsibilities
Job Description: Data Security Architecture Assessment Contractor
Role: Engineer II (Cloud Security Consultant) Focus: Security assessment of Azure-based conversational AI, telephony, API, and backend integration architecture.
Responsibilities
- Assess the end-to-end architecture from a data security and privacy standpoint.
- Review data flows across:
- Azureservice projects
- Virtual agents / conversational AI
- Telephony platforms
- API proxies
- Datastore, BigQuery, Cloud Storage
- On-prem / Amex systems of record
- Identify risks related to:
- Customer data exposure
- PII handling
- Authentication and authorization
- Encryption in transit and at rest
- Secrets and key management
- Logging, monitoring, and auditability
- Data retention and deletion
- Cross-boundary data movement
- Review security controls for GCP Shared VPC, interconnects, service accounts, IAM, and network segmentation.
- Implement Sentinel policies for enforcing encryption standards.
- Implement database activity monitoring and blocking rules in GCP.
- Assess AI-specific risks, including prompt/context leakage, model input/output handling, and knowledge store access.
- Produce findings report with risk ratings, gaps, and remediation recommendations.
Required Skills
- Strong experience in cloud security architecture, preferably Azure.
- Hands-on knowledge of:
- AzureIAM
- VPC / Shared VPC
- Cloud Run / GKE
- BigQuery
- Cloud Storage
- Datastore / Firestore
- Cloud KMS / Secret Manager
- Experience assessing data protection controls for PII, PCI, or regulated customer data.
- Knowledge of API security, including OAuth, mTLS, token handling, gateways, and service-to-service authentication.
- Familiarity with network security, private connectivity, firewalls, segmentation, and hybrid cloud interconnects.
- Understanding of logging, SIEM integration, audit trails, and security monitoring.
- Experience with threat modeling and architecture risk reviews.
Preferred Skills
- Experience with conversational AI / virtual agent platforms.
- Knowledge of telephony/SIP integrations and contact center platforms.
- Experience with PCI DSS, NIST, ISO 27001, SOC 2, or financial services security standards.
- Familiarity with AI data governance, model safety, and GenAI security risks.