Principal Azure Cloud Security Architect

JOB TITLE: Principal Azure Cloud Security Architect

JOB LOCATION: REMOTE (1 Day Onsite per Quarter in either Brooklyn, NY, Hicksville, NY, or Waltham, MA)

SALARY RANGE*: 190k-210k plus benefits, pto, etc.. (Bonus Structure: 15% target - can go up to 200% of target depending on individual performance and company's financial results)

JOB NUMBER: NGGJP00017333


JOB DESCRIPTION:


We keep people connected and society moving. But it's so much more than that. Client supplies us with the environment to make it happen. As we generate momentum in the energy transition for all, we don't plan on leaving any of our customers in the dark. So, join us as Principal Azure Cloud Security Architect, and find your superpower. We need you!


We want to find an innovative, adaptable, and results-oriented Principal Azure Cloud Security Architect for our Cybersecurity team. This position can be located in Brooklyn, NY, Hicksville, NY, or Waltham, MA (candidates may also reside in either Connecticut, New Jersey, New Hampshire, Pennsylvania, Rhode Island, Vermont, or Maine). If you yearn to be innovative, contribute new ideas, and play a critical part in our Cloud Security organization, we want to hear from you!



What you'll do
As Principal Cloud Security Architect, you'll own the security architecture and operational security posture of Azure, working directly in the platform to design and implement controls, monitor risk, drive continuous remediation, and to ensure compliance with industry regulations and best practices. You'll serve as a senior technical authority for cloud security, balancing architectural leadership with hands-on execution, and ensuring measurable risk reduction across cloud environments and workloads. You'll combine excellent relationship and collaboration skills, deep technical knowledge and hands-on experience with major cloud providers and emerging cloud security technologies, proficiency with DevOps and automation, and a practical approach to real-world risk reduction to solve complex security problems. Key responsibilities include the following:


Design and implement secure Azure cloud architecture, including network segmentation, access controls, and secure account and subscription architecture
Assist with the selection, and lead the implementation of security solutions across Azure, AWS, and other major cloud providers
Develop, implement, and socialize technical patterns, standards and guidance for cloud infrastructure and applications
Own and administer the Cloud Native Application Protection Platform (CNAPP), including hands-on administration and configuration of the CNAPP solution, prioritizing findings, and driving remediation activities
Monitor cloud security posture and conduct regular security assessments and risk analysis to identify vulnerabilities and prioritize remediation efforts
Automate security policies and workflows using scripting languages and cloud native security tools to improve efficiency and scalability
Assist with incident response activities for cloud-related security incidents, including investigation, containment, remediation, and post-mortem analysis.
Collaborate with cross-functional teams (Business project teams, cloud platform and engineering teams, DevOps, Compliance) to integrate security practices into cloud deployments.


Extensive hands-on experience with Azure and familiarity with other major cloud providers (AWS, Google Cloud Platform) and security tools and technologies (Azure Security Center, AWS Security Hub, Google Cloud Platform Security Command Center, CNAPP tools, etc.).
Deep understanding of cloud security concepts, including network security, data protection, identity management, and threat modeling across major cloud providers.
Strong security foundations including experience with network security, vulnerability management, penetration testing, security operations, and application security; fundamental security concepts such as encryption, secure protocols and best in class solutions.
Proficiency in scripting languages (Python, PowerShell) for automation and security orchestration.
Exceptional interpersonal and communication skills with the proven ability to build strong relationships with diverse IT and business stakeholders.
Familiarity with ICS/SCADA/OT environments and architecture, along with industry-relevant standards such as NIST, CIS benchmarks, CSA CCM, and NERC CIP.
More Information


Are you the right fit for this exciting role? You want to learn more about the position and Client's ambitious Digital Transformation? Then let's chat!


Our organization follows a hybrid work structure in our service territory (NY & MA and adjacent states) where employees can work remotely or from the office, as needed. Working from the office is encouraged when working on tasks that require a high degree of collaboration. We work with our employees to foster a flexible work schedule.


Salary is commensurate with experience and location


Client utilizes an assessment that evaluates the job qualifications/characteristics using AI or statistically based scoring. For more information, please view NYC Local Law 144.


Client is an equal opportunity employer that values a broad diversity of talent, knowledge, experience and expertise. We foster a culture of inclusion that drives employee engagement to deliver superior performance to the communities we serve. Client is proud to be an affirmative action employer. We encourage minorities, women, individuals with disabilities and protected veterans to join the Client team.



Equal opportunity employer as to all protected groups, including protected veterans and individuals with disabilities



* While an hourly range is posted for this position, an eventual hourly rate is determined by a comprehensive salary analysis which considers multiple factors including but not limited to: job-related knowledge, skills and qualifications, education and experience as compared to others in the organization doing substantially similar work, if applicable, and market and business considerations. Benefits offered include medical, dental and vision benefits; dependent care flexible spending account; 401(k) plan; voluntary life/short term disability/whole life/term life/accident and critical illness coverage; employee assistance program; sick leave in accordance with regulation. Benefits may be subject to generally applicable eligibility, waiting period, contribution, and other requirements and conditions. Benefits offered are in accordance with applicable federal, state, and local laws and subject to change at TCM's discretion.


#Dice