Cloud Security Architect

This is a contract-to-hire opportunity, ideally hybrid in Central NJ, with some flexibility for local remote. The organization is a large, heavily regulated financial services enterprise operating a fully isolated Azure cloud environment with no reliance on shared services teams or on-premises infrastructure. The security function owns the entire cloud security program end to end, with no handoffs to other teams for implementation. This role is built for someone who implements, not just advises. The organization needs a cloud security architect who can take a requirement from design all the way through hands-on configuration in Azure without relying on another team to execute. IAM and PAM, MFA, Conditional Access, zero trust controls, SOC1 audit readiness including controls mapping and findings ownership, all of it done by the person in this seat. The broader team is well-staffed across cloud, systems, and project functions, but cloud security is fully yours to own. For the right fit, this converts to a permanent role.

Contract Duration: 6 months, contract-to-hire

• 7+ years of cloud security experience, with Azure as the primary environment (Azure is a hard requirement)
• Hands-on proficiency with Azure native security tooling: Microsoft Defender for Cloud, Microsoft Sentinel, Entra ID, Conditional Access policies, Azure Policy, Azure Key Vault, and Microsoft Purview
• Demonstrated ability to own cloud security architecture end to end, from design through hands-on configuration and implementation
• IAM and PAM design and implementation: MFA configuration, privileged access management, RBAC, and security baseline setup across the environment
• SOC1 audit experience in a regulated environment, including controls mapping, core findings identification, and remediation oversight
• Zero trust architecture design and implementation in Azure cloud environments
• Clear communication skills across technical and non-technical stakeholders

• AZ-500 (Microsoft Azure Security Technologies), CISSP, or CCSP
• Background in financial services, fintech, or another highly regulated industry vertical
• Experience building or maturing a cloud security program from scratch with full ownership
• Familiarity with PAM platforms such as CyberArk or BeyondTrust

• 35% Azure cloud security architecture design and implementation
• 25% IAM and PAM configuration, MFA management, and access policy controls
• 25% SOC1 audit readiness, controls documentation, and compliance oversight
• 15% Cross-functional collaboration, documentation, and stakeholder communication

• 65% Hands On: Configuring and implementing Azure security controls, IAM and PAM policies, access frameworks, and security architecture across the full cloud environment
• 15% Management Duties: Overseeing remediation and mitigation execution by the broader team on audit findings and identified gaps
• 20% Team Collaboration: Working across cloud architects, systems administrators, and project managers on security alignment and implementation priorities

For applications and inquiries, contact:View email address on us.fitly.work