Security Architect

Job Description

CLOUD & NETWORK SECURITY ENGINEER / SECURITY ARCHITECT

\n

\n

TECHNOLOGY COMPANY

\n

\n

HYBRID IN THE GREATER SEATTLE AREA, WA (but open to fully remote for the right fit)

\n

\n

$78-$89/hr, $13,728-$15,136/month COMPENSATION RATE (depending on experience)

\n

\n

PLEASE NOTE: This role is not open to Corp to Corp.

\n

\n

OUR COMPANY – MURPHY & ASSOCIATES

\n

Murphy & Associates has had the privilege of providing technology and business consulting services to over 150 diverse clients in the Greater Seattle Area since 1980. We take great pride in our full disclosure model and low margins which attracts top tier talent. We are transparent with our employees. Our business model fosters loyalty, satisfaction, and consistent delivery of quality services from the consultants on our team. Through it all, Murphy & Associates has stayed true to its roots, partnering with highly qualified technology and business consultants and working closely with our clients, fairly and ethically.

\n

\n

THE CLIENT

\n

Our client is a large technology company based in the Greater Seattle Area. They develop software, services, products, and hardware devices.

\n

\n

CLOUD & NETWORK SECURITY ENGINEER / SECURITY ARCHITECT:

\n

Azure Cloud Security | Network Security | Kusto/KQL

\n

\n

Role Overview

\n

We are seeking an experienced Cloud & Network Security Engineer/Security Architect to strengthen the security posture of large-scale Azure infrastructure. The role combines hands-on cloud and network security expertise with Kusto-based security analytics to identify risks, define scalable controls, and drive remediation with engineering teams.

\n

\n

Key Responsibilities

\n

\n
• Assess security posture across Azure subscriptions, resources, services, and network architectures.
\n
• Identify cloud security risks, configuration gaps, exposures, and control failures; provide actionable remediation guidance.
\n
• Evaluate network segmentation, routing, NSGs, firewalls, private endpoints, ingress/egress controls, VPN, and ExpressRoute.
\n
• Develop and optimize Kusto Query Language (KQL) queries for security, compliance, exposure, exception, and remediation analysis.
\n
• Translate security requirements into scalable technical controls, guardrails, and secure-by-default configurations.
\n
• Partner with engineering, platform, security, and service teams on architecture reviews, risk assessments, and remediation.
\n

\n

\n

YOUR SKILLS AND EXPERIENCE

\n

Required Skillset/Core Skill Priorities

\n

\n
• Cloud Security: Azure security architecture, Azure resources, identity, RBAC, managed identities, network controls, storage security, encryption, and secure configuration.
\n
• Network Security: TCP/IP, DNS, routing, segmentation, NSGs, Azure Firewall, WAF, Private Link/private endpoints, VPN, ExpressRoute, and inbound/outbound traffic controls.
\n
• Kusto/KQL: Hands-on KQL using joins, summarize, extend, project, parse, mv-expand, unions, time-series analysis, query optimization, and troubleshooting.
\n
• Azure Platform: Tenants, management groups, subscriptions, resource groups, ARM resource model, and Azure resource providers.
\n
• Security Posture: CSPM, security controls, configuration assessment, exposure management, compliance, exceptions, and remediation.
\n
• Security Controls: Ability to interpret security requirements and translate them into practical Azure technical controls and guardrails.
\n
• Identity Security: Microsoft Entra ID, Azure RBAC, privileged access, workload identities, managed identities, and least privilege.
\n
• Automation: PowerShell, Azure CLI, Python, REST APIs, or comparable scripting and automation technologies.
\n
• Data Analysis: Ability to analyze large security datasets and convert technical findings into actionable insights and metrics.
\n
• Communication: Ability to explain risks and remediation to engineering teams and summarize security posture for leadership.
\n

\n

\n

Preferred Qualifications

\n

\n
• Experience with Microsoft Defender for Cloud, Azure Policy, Azure Resource Graph, and Log Analytics.
\n
• Experience with Wiz or comparable CSPM/CNAPP platforms.
\n
• Automation experience using PowerShell, Azure CLI, Python, or REST APIs.
\n
• Familiarity with Zero Trust, CIS Benchmarks, NIST CSF, and MITRE ATT&CK.
\n
• Experience securing large-scale enterprise cloud environments.
\n

\n

\n

WORK ENVIRONMENT

\n

Duration: ASAP to start, to run through June 2027, and chance to extend.

\n

Daily Schedule: M-F, 40 hours a week, no OT anticipated.

\n

Location: Open to fully remote candidate. Team sits in Redmond, WA. Preference for a local candidate to come onsite as needed.

\n

\n

BENEFITS

\n

We offer the opportunity to participate in health, dental, and vision insurance, along with a 401k.

\n

\n

HOW TO APPLY

\n

Please register your interest by applying here with your LinkedIn profile.

\n

\n

KEYWORDS

\n

Cloud security, kusto, network security, azure

\n

\n

Murphy is an Equal Opportunity Employer. We will consider all applications without regard to race, gender, sexual orientation, gender identity, age, color, religion, national origin, veteran status, disability, genetic information or any other status protected by applicable law.