Azure Cloud Architect

Role Overview

The Azure Solutions Architect with Cybersecurity Specialization is a senior role responsible for designing, implementing, and securing Azure-based cloud infrastructures. This professional ensures that enterprise architectures are scalable, resilient, and aligned with organizational security and compliance requirements. They will leverage Azures cloud-native services and specialized security tools to architect secure, high-performance solutions that address both business needs and cybersecurity concerns.

Key Responsibilities

• Solution Architecture Design & Strategy
  Lead the design and architecture of end-to-end Azure solutions, ensuring alignment with business objectives. Work across cloud infrastructure (compute, storage, networking) and cloud-native services while embedding security at every layer of the architecture.
• Cybersecurity Integration
  Integrate cybersecurity best practices into cloud designs by leveraging Azures native security tools and services such as Azure Security Center, Azure Sentinel, Azure Active Directory (AAD), Azure Firewall, and Azure Key Vault. Implement role-based access controls (RBAC), secure data management, and encryption strategies.
• Identity & Access Management
  Design and implement Azure Active Directory strategies, including Conditional Access policies, Multi-Factor Authentication (MFA), and Identity Protection. Ensure proper identity management and access control for all users and services in the Azure environment.
• Security & Compliance Management
  Architect cloud environments that adhere to global and industry-specific standards such as GDPR, HIPAA, PCI-DSS, and SOC 2. Leverage Azure Policy, Azure Blueprints, and Compliance Manager to enforce governance and compliance in Azure environments.
• Threat Detection & Prevention
  Implement proactive security measures for threat detection and prevention using Azure Sentinel (SIEM), Microsoft Defender for Cloud, and Azure DDoS Protection. Monitor and respond to security alerts to mitigate risks.
• Cloud Security Posture Management (CSPM)
  Continuously assess the cloud security posture and implement solutions for continuous monitoring, automated remediation, and threat mitigation using tools like Azure Security Center and Microsoft Defender for Cloud.
• Network Security Architecture
  Design secure network architectures using Azure Virtual Networks (VNet), Network Security Groups (NSG), Azure Firewall, Application Gateway, and Azure Bastion to secure inbound and outbound traffic and ensure that data transfers are encrypted.
• Disaster Recovery & Business Continuity
  Implement disaster recovery (DR) strategies and business continuity plans using Azure Site Recovery, Azure Backup, and other Azure-native solutions. Ensure the architecture supports high availability and resilience.
• Incident Response & Remediation
  Lead incident response efforts in the event of a security breach. Implement procedures for rapid detection, containment, and remediation of security vulnerabilities.
• Collaboration & Stakeholder Management
  Collaborate with key stakeholders, including development, operations, security, and compliance teams, to define solution architectures. Provide guidance and training to teams on Azure security best practices and threat mitigation techniques.
• Documentation & Knowledge Sharing
  Maintain up-to-date technical documentation for architecture designs, security configurations, and deployment processes. Share knowledge of emerging cybersecurity threats and solutions to improve the overall security posture.
• Legal Matters, Coordinating with Infosec team regarding security events.
• Forensic Methods in identifying root cause, Containments Method to isolate infected resources.

Required Qualifications & Skills

• Bachelors degree in Computer Science, Cybersecurity, Information Technology, or related field, or equivalent work experience.
• 10+ years of experience in cloud architecture, with a focus on Azure solutions.
• In-depth knowledge of Azure services and security tools, including Azure Active Directory, Azure Security Center, Azure Sentinel, Microsoft Defender for Cloud, Azure Key Vault, and Azure Firewall.
• Strong understanding of cloud security concepts such as identity management, encryption, access control, and threat mitigation in an Azure environment.
• Expertise in implementing compliance and governance frameworks within Azure (e.g., Azure Policy, Azure Blueprints, Azure Compliance Manager).
• Solid experience with network security in the cloud, including Virtual Networks, Network Security Groups (NSG), Application Gateway, and Azure Firewall.
• Experience in Identity and Access Management (IAM), including configuration of RBAC, MFA, and conditional access in Azure Active Directory.
• Proficiency in Infrastructure as Code (IaC) using tools like Terraform, Azure ARM Templates, or Bicep to automate security configuration and cloud deployments.
• Hands-on experience with cybersecurity threat detection using tools like Azure Sentinel and Microsoft Defender for Cloud.
• Ability to troubleshoot and resolve complex security and network issues in an Azure environment.
• Strong communication skills, including the ability to document and communicate complex architectural and security concepts to stakeholders at all levels.