Cloud Security Architect

Job Title: NCDOT - Cloud Security Architect - Expert (809185) in Raleigh, NC - Onsite Duration: 12 Months Interview: In Person Last date: 08/26/2026 Job description: OpenKyber is needed to support the NCDOT Microsoft Azure cloud tenant build and configuration, specifically focusing on security compliance design, implementation, operations, and assessment. The role is for a Cloud Security Architect - Expert that will support the ongoing NCDOT DMV Modernization Microsoft Azure cloud infrastructure build, security compliance design, security compliance configuration, and security compliance assessment and reporting. The primary focus is to lead NCDIT-T in security architecture, configuration, operations, and compliance assessment of the environment and be a bridge between NCDIT, NCDOT DMV, and vendors in delivery of a Microsoft Azure cloud environment that meets security regulatory, organizational, and industry security compliance requirements and compliance reporting, balanced with functional requirements. The complexity of these responsibilities are essential to NCDIT-T to support the build of the Azure tenant so that NCDOT DMV systems can be placed in the cloud securely and meet compliance requirements. NCDIT-T and NCDOT DMV have an aggressive schedule to complete NCDOT DMV modernization efforts.

Skills & Questions Matrix: Skill Required / Desired Amount of Experience No of years of experience you have Design and maintain secure Azure architectures across identity, networking, data protection, logging/monitoring, and governance. Required 5 Years Develop and enforce Azure security standards, policies, and reference architectures aligned to organizational and regulatory requirements. Required 5 Years Lead threat modeling, risk assessments, and security reviews for the Azure cloud environment and NCDMV Modernization efforts. Required 5 Years Provide expert guidance on Azure-native security tooling (e.g., Defender for Cloud, Sentinel, Azure Policy, Key Vault, Monitor, Log Analytics) Required 5 Years Deep expertise with Azure security services Required 5 Years Strong understanding of cloud networking security: Zero Trust, routing, segmentation, firewalls, DNS, PKI, IAM, and secure landing zone architectures. Required 5 Years Knowledge of compliance frameworks and mapping security controls (NIST 800 53, NIST 800 171, PCI DSS, FIPS, state security standards). Required 5 Years Experience designing and evaluating secure multi tenant architectures and enterprise governance models in Microsoft Azure. Required 5 Years Expertise integrating third party solutions (Cloudflare, Palo Alto, etc.) with Azure security and monitoring. Required 5 Years Proficiency with automation and IaC: ARM/Bicep, Terraform, GitHub/Azure DevOps pipelines, and policy as code. Required 5 Years Ability to translate security requirements into actionable architectural and technical guidance and configurations. Required 5 Years Strong documentation skills for security standards, baselines, and system security plans. Required 5 Years Experience and strong skills in identifying options for security assessments of the Azure environment and producing detailed and executive summary sec Required 5 Years Q1: Absences greater than two weeks MUST be approved by OpenKyber management in advance, and contact information must be provided to OpenKyber so that the resource can be reached during his or her absence. The Client has the right to dismiss the resource if he or she does not return to work by the agreed upon date. Do you accept this requirement? (Yes/No) Q2: The candidate to be local to the Triangle area. While most working days will be remote, there may be the occasional need to be onsite at customer offices in NCDOT's Wake/Durham County offices. Do you accept this requirement? (Yes/No) Q3: ONLY SUBMIT CANDIDATES CURRENTLY LIVING IN THE RALEIGH/DURHAM/CHAPEL HILL, NC AREA. Please list where your candidate is currently located. Q4: Please indicate how soon this candidate is available to start work. Vendors are encouraged to submit candidates that are available for the duration of the assignment. (Yes/No)

For applications and inquiries, contact:View email address on us.fitly.work