Job description

Job Title-Azure Cybersecurity Architect Location-Ewing NJ -Hybrid Mode of Hire- Contract Mode Of Work-Hybrid Key Responsibilities Cloud Security & Engineering • Manage and monitor security controls across Azure and other cloud environments (SaaS, PaaS, IaaS). • Design and implement controls for identity management, encryption, data protection, and threat detection. • Evaluate Azure configurations to ensure compliance with security and regulatory requirements. • Assess and validate the security posture of key SaaS applications (CRM, HR, identity, messaging, etc.). • Support secure design, development, and deployment of .NET and Angular applications hosted on Azure App Services. Threat Detection & Incident Response • Leverage Microsoft Sentinel and Defender to monitor and analyze security alerts and incidents. • Conduct investigations, correlate event logs, and perform root cause analyses to resolve incidents. • Review vulnerability assessments, penetration test results, and audit reports to identify and mitigate risks. • Proactively address vulnerabilities, compliance gaps, and security risks. Networking & Zero Trust • Design and manage secure Azure network architectures, including NSGs, Azure Firewall, and Private Endpoints. • Implement network segmentation and least-privilege access principles. • Manage Zscaler configurations and policies to enforce secure access and zero-trust principles. • Support hybrid connectivity, VPN configurations, and ExpressRoute integrations. Collaboration & Governance • Partner with DevOps and Cloud Engineering teams to integrate security into CI/CD pipelines. • Develop and maintain cloud security policies, processes, and playbooks. • Ensure security controls align with organizational goals and compliance standards. • Stay informed about emerging threats, technologies, and regulatory changes. Qualifications • Bachelor's degree in Cybersecurity, Computer Science, or related discipline (or equivalent experience). • 5+ years of hands-on experience in cybersecurity engineering or analysis. • Strong expertise in Azure security architecture and services. • Deep understanding of TCP/IP, DNS, VPNs, routing, and network segmentation. • Familiarity with Web Application Firewalls and API Management tools. • Experience with Microsoft Sentinel, Defender, Intune, Purview, and Zscaler. • Working knowledge of DevSecOps tools and practices (e.g., GitHub Actions, Azure DevOps). • Experience with application security testing tools (SAST, DAST, dependency scanning). • Knowledge of NIST CSF or equivalent security frameworks. • Proficiency in scripting languages such as PowerShell or Python. • Excellent problem-solving, communication, and analytical skills. Preferred Certifications • Microsoft Certified: Azure Security Engineer Associate (AZ-500) • Microsoft Certified: Cybersecurity Architect Expert (SC-100) • Microsoft Certified: Security Operations Analyst Associate (SC-200) • CISSP, CISM, or CSSLP certifications are a plus, especially for candidates with strategic or software security lifecycle experience.

Requirements