Senior Cloud Security Architect

Epikso Mexico; Xico; Remote; MXN 900,000 - 1,300,000; Part time

Job summary

Epikso Mexico is seeking a Senior Cloud Security Architect to lead Azure security across enterprise environments, focusing on Entra ID, Defender for Cloud, Sentinel, Azure Policy, and Zero Trust design.

This remote, long-term contract covers multi-cloud security (Azure and AWS), Palo Alto security tools, data security controls, and DevSecOps practices with Terraform/Bicep and policy-as-code.

Qualifications

• Experience leading Azure security architecture.
• Strong knowledge of Entra ID, Defender for Cloud and Sentinel.
• Proficiency in Azure Policy, Key Vault and Zero Trust design.

Responsibilities

• Lead enterprise Azure Security Architecture with deep expertise in Entra ID, Defender for Cloud, Sentinel, Azure Policy, Key Vault, networking, landing zones, and Zero Trust security design.
• Own multi-cloud security across Azure and AWS, including AWS IAM, Organizations, VPC, KMS, Security Hub, GuardDuty, and AWS-to-Azure migration security workstreams.
• Architect and govern Palo Alto security solutions including NGFW, Panorama, Prisma Cloud, Prisma Access/SASE, Cortex XDR/XSIAM, cloud posture management, and network segmentation.
• Drive data security and compliance through Microsoft Purview, DLP, data classification, encryption, key management, PCI-DSS, SOC2, NIST, GDPR controls, and cloud data platform security.
• Implement DevSecOps and Infrastructure as Code using Terraform/Bicep, CI/CD security, policy-as-code, container/Kubernetes security, automation, threat modeling, and secure cloud governance.

Skills

Azure Security

Entra ID

Microsoft Defender

Sentinel

Azure Policy

Palo Alto Networks

Prisma Cloud

AWS Security

Purview

Terraform

Bicep

Zero Trust

Cloud Security Architecture

Tools

Terraform

Bicep

Job description

Senior Cloud Security Architect

Remote

Long term Contract

Please note, this is a contractor position

• Lead enterprise Azure Security Architecture with deep expertise in Entra ID, Defender for Cloud, Sentinel, Azure Policy, Key Vault, networking, landing zones, and Zero Trust security design.
• Own multi-cloud security across Azure and AWS, including AWS IAM, Organizations, VPC, KMS, Security Hub, GuardDuty, and AWS-to-Azure migration security workstreams.
• Architect and govern Palo Alto security solutions including NGFW, Panorama, Prisma Cloud, Prisma Access/SASE, Cortex XDR/XSIAM, cloud posture management, and network segmentation.
• Drive data security and compliance through Microsoft Purview, DLP, data classification, encryption, key management, PCI-DSS, SOC2, NIST, GDPR controls, and cloud data platform security.
• Implement DevSecOps and Infrastructure as Code using Terraform/Bicep, CI/CD security, policy-as-code, container/Kubernetes security, automation, threat modeling, and secure cloud governance.

Primary Skills: Azure Security, Entra ID, Microsoft Defender, Sentinel, Azure Policy, Palo Alto Networks, Prisma Cloud, AWS Security, Purview, Terraform/Bicep, Zero Trust, Cloud Security Architecture.

Preferred Certifications: AZ-500, SC-100, CISSP, CCSP, PCNSE, AWS Security Specialty.