Azure Cloud Security Architect

Job Title:Azure Cloud Security Architect Duration: 3 month contract Location:Milwaukee, WI Hybrid Pay: $125-130/hr This role will support cloud security, vulnerability remediation, infrastructure protection, and governance throughout the transition. Key Responsibilities Cloud Architecture & Vulnerability Baseline: Finalize Azure architecture security reviews and coordinate with legacy infrastructure teams to remediate critical/high vulnerabilities identified in the security baseline. Rescan hosting and identity environments (Azure, on-premises datacenters, and Active Directory) transitioning to the new organization. IaC & Penetration Testing Remediation: Perform static security scans on Azure AD Infrastructure as Code (IaC) codebases. Coordinate remediation of critical/high vulnerabilities identified through Azure penetration testing. Cloud Security Posture Management (CSPM) & SaaS Protection: Implement CrowdStrike CSPM, conduct posture vulnerability testing, remediate critical findings, and perform post-remediation testing. Integrate Falcon Shield for the Azure Jump Domain. Data Security & Repository Protection: Scan data repositories using Cyera, coordinate data volume tier expansions for migration pipelines, and remediate identified data exposure vulnerabilities. Azure Databricks Security & Governance: Review and secure approval for TLS inspection exceptions, including risk documentation, compensating controls, and ServiceNow sign-off. Validate private-by-design architecture, enforcing VNet injection, Secure Cluster Connectivity (no public IPs), private endpoints, and private DNS. Coordinate GSOC logging ingestion and retention policies, including 90-day blob storage retention before full GSOC integration. Oversee Entra ID and IAM access governance for Databricks workspaces, Unity Catalog, service principals, and managed identities. Ensure centralized egress routing through Azure Firewall for all approved external integrations. #J-18808-Ljbffr Planet Group Inc