Azure Cloud Security Architect

Job Description

Job Title: Azure Cloud Security Architect

\n

Duration: 3-month contract

\n

Location: Milwaukee, WI Hybrid OR Will also consider King of Prussia PA as a backup location.

\n

\n

\n
• Cloud Architecture & Vulnerability Baseline: Finalize Azure architecture security reviews and coordinate with legacy Enviri teams to remediate critical/high vulnerabilities from the security baseline. Rescan hosting and identity surfaces (Azure, on-premises datacenters, Active Directory) transitioning to Veolia.

\n

• IaC & Pentest Remediation: Perform static security scans on Azure AD Infrastructure as Code (IaC) codebases. Coordinate remediation of critical/high vulnerabilities identified from Azure penetration testing.

\n

• Cloud Posture (CSPM) & SaaS Protection: Implement CrowdStrike CSPM, execute posture vulnerability testing, remediate critical findings, and retest post-remediation. Integrate Falcon Shield for the Azure Jump Domain.

\n

• Data Security & Repository Protection: Scan data repositories using Cyera, coordinate data volume tier expansions for migration pipelines, and remediate data exposure findings.

\n

• Azure Databricks Security & Governance: Review and secure approval for the TLS inspection exception (including risk documentation, compensating controls, and ServiceNow sign-off); validate private-by-design architecture (enforcing VNet injection, Secure Cluster Connectivity with no public IPs, private endpoints, and private DNS); coordinate GSOC logging ingestion and retention policies (such as 90-day blob storage retention prior to full GSOC integration); oversee Entra ID and IAM access governance for Databricks workspaces, Unity Catalog, service principals, and managed identities; and ensure centralized egress routing via Azure Firewall for all approved external integrations.

\n

\n