Azure Security Architect — Healthcare, Remote, Part-Time

Near Shore Cyber; United States; Remote; USD 131,000 - 152,000; Part time

Job summary

Nearshore Cyber seeks a senior security architect to design and harden an Azure environment for a healthcare migration. This remote, part-time engagement supports an MSP managing a multi-clinic US healthcare organization, with a focus on ransomware resilience and secure telemetry from Defender for Cloud and Sentinel.

You will own identity and access design, network segmentation, governance, logging, and incident readiness, mentoring delivery engineers and aligning controls with HIPAA, NIST CSF,

Qualifications

• Seven+ years in information security, with at least three designing and hardening Microsoft Azure environments in production.
• Hands-on depth in Azure network security: hub-and-spoke design, NSGs, private endpoints, ExpressRoute, route control, firewall insertion.
• Experience designing Azure governance: management groups, subscriptions, RBAC, Azure Policy, landing zones.

Responsibilities

• Produce and own the security design for the Azure environment across identity, infrastructure, networking, governance, policies, access control, logging, and monitoring.
• Identity and access control: design Microsoft Entra ID, Conditional Access, Privileged Identity Management (PIM), and RBAC for least-privilege access.
• Infrastructure: harden AVS, Azure VMs, and supporting services against baselines, and review live builds.
• Networking: define segmentation and traffic controls across ExpressRoute, firewalls and ION appliances, clinic and VPN connectivity, and internet egress.
• Governance and policies: shape management groups, subscription structure, Azure Policy, security baselines, and written standards.
• Logging and monitoring: define log sources, retention, and detection coverage in Defender for Cloud and Sentinel or MSSP platform.
• Advise on ransomware resilience with Azure as primary and hosted site as secondary: immutable backups, RPO/RTO, recovery testing.
• Join MSSP sessions, assess requests, and map telemetry to Azure and firewall capabilities.
• Map controls to HIPAA Security Rule and recognized frameworks; document decisions for client, insurer, auditors.
• Mentor delivery engineers so security practices integrate into the build process.

Skills

Azure security

IAM RBAC

Network security

SIEM

Tools

Microsoft Defender for Cloud

Microsoft Sentinel

Azure Policy

ExpressRoute

Job description

Nearshore Cyber seeks a senior security architect to design and harden an Azure environment for a healthcare migration. This remote, part-time engagement supports an MSP managing a multi-clinic US healthcare organization, with a focus on ransomware resilience and secure telemetry from Defender for Cloud and Sentinel.

You will own identity and access design, network segmentation, governance, logging, and incident readiness, mentoring delivery engineers and aligning controls with HIPAA, NIST CSF,