Azure Cloud Security Architect/Engineer

The Planet Group; Pennsylvania; On-site; USD 170,000 - 180,000; Full time

Job summary

A leading technology staffing firm is seeking an experienced SVP Technology Staffing to architect secure cloud solutions and lead security initiatives. The ideal candidate has 8+ years in information security, expertise in cloud security, and strong leadership abilities. This full-time position in Philadelphia offers a competitive salary and a 10% bonus.

Qualifications

• 8+ years of experience in information security, with a focus on security architecture.
• 5+ years of experience in Cloud Security, preferably with Microsoft Azure.
• Proficiency in threat modeling methodologies.
• Strong knowledge of secure coding principles.

Responsibilities

• Design and develop security architectures for cloud-native applications.
• Lead security architecture reviews for products and features.
• Conduct threat modeling exercises and risk assessments.
• Collaborate with teams to integrate security into the SDLC.
• Drive the adoption of security automation tools.

Skills

Security architecture

Cloud Security

Application Security

Secure coding principles

Threat modeling methodologies

Security frameworks

Containerization technologies

Security automation tools

Communication skills

Analytical skills

Tools

Microsoft Defender

Azure Security Center

Azure Key Vault

Terraform

Python

Job description

This range is provided by The Planet Group. Your actual pay will be based on your skills and experience — talk with your recruiter to learn more.

Base pay range

$170,000.00/yr - $180,000.00/yr

SVP Technology Staffing at The Planet Group

US CITIZENS AND GREEN CARD HOLDERS ONLY

Bonus: 10%

Hours: 40

Location: North Philadelphia

Responsibilities

• Architect Secure Cloud Solutions: Design and develop comprehensive security architectures for cloud-native applications and services (e.g., AWS, Azure, GCP), ensuring adherence to industry best practices, regulatory requirements (e.g., SOC 2, HIPAA, GDPR), and internal security policies.
• Product Security Champion: Lead security architecture reviews for new and existing products and features, identifying potential vulnerabilities, recommending appropriate security controls, and guiding engineering teams on secure coding practices.
• Threat Modeling & Risk Assessment: Conduct in-depth threat modeling exercises and risk assessments for cloud environments and product features, proactively identifying and mitigating security risks throughout the SDLC.
• Security by Design & DevSecOps: Collaborate closely with product managers, developers, and DevOps engineers to integrate security considerations early and continuously into the software development lifecycle (SDLC) using a 'security by design' and DevSecOps approach.
• Cloud Security Expertise: Provide expert guidance on securing cloud infrastructure, including identity and access management (IAM), network security, data encryption, container security, serverless security, and cloud security posture management (CSPM).
• Automation & Tooling: Drive the adoption of security automation and orchestration tools to enhance the efficiency and effectiveness of security controls in cloud and product environments.
• Incident Response & Remediation: Contribute architectural insights and recommendations to incident response efforts, aiding in the remediation of security incidents related to cloud and product vulnerabilities.
• Security Best Practices & Standards: Research, evaluate, and recommend new security technologies, frameworks, and best practices to continually improve our overall security posture.
• Mentorship & Collaboration: Mentor junior security engineers and foster a culture of security awareness and responsibility across engineering and product teams.
• Documentation: Create and maintain detailed security architecture documentation, security standards, and operational procedures.

Ideal Skills & Experience

• 8+ years of experience in information security, with a significant focus on security architecture.
• 5+ years of experience specifically in Cloud Security, with deep expertise in Microsoft Azure.
• 3+ years of experience in Product Security, Application Security, or Secure SDLC.
• Deep understanding of cloud security principles and hands-on experience with Microsoft Defender, Azure Security Center, Azure Policy, Azure Key Vault, Azure AD and Conditional Access Policies
• Proficiency in threat modeling methodologies (e.g., STRIDE, DREAD) and practical experience applying them to cloud and product architectures.
• Strong knowledge of secure coding principles and common application security vulnerabilities (e.g., OWASP Top 10, CWE).
• Experience with security frameworks such as NIST CSF, ISO 27001, and CIS Benchmarks for Azure.
• Familiarity with containerization technologies (e.g., Docker, AKS) and their associated security challenges.
• Experience with security automation tools and scripting languages (e.g., Azure CLI, Python, PowerShell, ARM templates, Terraform).
• Excellent communication, presentation, and interpersonal skills, with the ability to effectively communicate complex technical concepts to both technical and non-technical audiences.
• Strong analytical and problem-solving skills, with a proactive and innovative approach to security.

Seniority level

• Mid-Senior level

Employment type

• Full-time

Job function

• Information Technology

Industries

• Software Development