Defender for Cloud Engineer

OpenKyber's client located in New York, NY ( Hybrid ) is looking for a Azure Cloud Architect for a long term contract assignment. Current Azure Solutions Architect Expert certification is strongly preferred. Please submit candidate certification credentials when applicable. This role is primarily focused on developing cloud architectures, frameworks, standards, governance, and policies for the organization. The ideal candidate will be proficient in engaging with business users and other technology teams to understand and assess requirements to subsequently develop multi/hybrid cloud architectures that can be implemented by the engineering teams. The resource will have to augment cloud engineering skills or guide engineers as needed. This role requires a degree of on-premises infrastructure knowledge because many on-premises systems interact with cloud resources or are being migrated to the cloud. The organization is also seeking to advance their Infrastructure-as-Code practices in the near future. Key Skills:

• Azure 6-10 Years
• Google Cloud Platform 1-2 Years (Ideally)
• AWS & OCI are nice to have
• Hybrid On-Prem/Knowledge 4-6 Years
• Cloud Networking 4-6 Years
• Cloud DevOps 4-6 Years
• Cloud Security 2-3 Years
• Cloud FinOps 1-2 Years
• Microsoft Visio 2-3 Years

Deep Understanding of Cloud Platforms, Services, Frameworks, Governance Proficiency with Azure Cloud Platform is a must. The resource will focus on designing architectures, standards, and governance for the Azure platform. Azure Cloud Shell - PowerShell, or CLI. Resource may augment existing teams skillsets for other cloud platforms as needed. Experience with hybrid and multi-cloud interoperability and on-prem to cloud integrations.

Design scalable, resilient, cost optimized, and secure cloud solutions that align with business needs and cybersecurity polices. Assess applications for cloud suitability and develop migration roadmaps. Document architectural designs (Microsoft Visio), cloud governance frameworks, cloud standards, and implementation guides.

Strong understanding of: Azure compute services (VMs, Scale-Sets, Batch) Azure storage (storage accounts, blobs, files, tables, queues, data lake) Azure data analytics platforms (Fabric, Data Factory, Synapse, Databricks, Event Hubs etc.). Azure database services (Azure SQL DB, Managed Instance, Hyperscale, Cosmos DB etc.) Serverless services (Azure Functions, Web App, App Services, ASE, Logic Apps, etc.) Containerization (Kubernetes, Docker, AKS, OpenShift, etc.). Implement disaster recovery (DR) and backup strategies aligned with regulatory compliance (RTO/RPO).

Hands-on experience with Terraform, Azure ARM, or Pulumi for infrastructure provisioning. Develop CI/CD pipelines for automated deployment using GitHub Actions, GitLab CI/CD, Jenkins, or AWS CodePipeline. Automate configuration management using Ansible, Chef, or Puppet.

Implement cloud security best practices (IAM, RBAC, WAF, NSG, ASG, Service Principals, Managed Identities, Azure Advisor, Defender for Cloud, Key Vault, encryption, monitoring). Knowledge of zero-trust architectures and cloud security frameworks (CIS, NIST, ISO 27001). Experience with SIEM tools (Splunk, Chronicle Security) for security monitoring.

Optimize cloud environments for cost efficiency using Azure Advisor, Cost and Billing Management, and general FinOps practices. Monitor performance and availability using Azure Monitor, Azure Resource Health, SolarWinds. Implement auto-scaling, caching, and load balancing strategies for cloud workloads.

Strong understanding of vNet design, Hub & Spoke, Peering, Application Gateway, Load Balancers, Traffic Manager, VPNs, ExpressRoute, and hybrid networking. Configure and optimize CDNs (Frontdoor, Cloudflare, Akamai) for low-latency applications.

Debug and troubleshoot cloud infrastructure, networking, and service-related issues. Use cloud-native monitoring, logging, and tracing tools (Azure Monitor, Network Watcher) for root cause analysis.

Work closely with cross-functional teams (Network, Server, DevOps, Cybersecurity, Finance, and Procurement). Translate complex technical concepts into business-friendly language. Participate in technical discussions, cloud strategy planning, and decision-making processes.

Please refer to the Position ID when inquiring about a job posting or sending in your resume. ***INDEPENDENT CONSULTANTS ONLY! NO THIRD PARTIES/NO SUB CONTRACTORS***

For applications and inquiries, contact:View email address on click.appcast.io