Azure Security Architect, Raleigh, NC, US

Intellibee; Raleigh (NC); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Long-Term Stability

Health Coverage

401(k) program

Green Card support

Job summary

IntelliBee is seeking a Cloud Security Architect - Expert to lead security architecture, configuration, operations, and compliance assessments for the NCDOT DMV Microsoft Azure cloud modernization.

You will bridge NCDIT-T, NCDOT DMV, and vendors to ensure Azure environments meet regulatory and industry standards while balancing functional requirements.

Qualifications

• 5+ years designing secure Azure architectures across identity, networking, data protection, and governance.
• Develop and enforce Azure security standards and reference architectures.
• Lead threat modeling, risk assessments, and security reviews for the Azure cloud environment.
• Provide guidance on Defender for Cloud, Sentinel, Azure Policy, Key Vault, Monitor.
• Deep expertise with Azure security services.
• Strong cloud networking security and Zero Trust implementation.
• Knowledge of NIST 800-53/800-171, PCI DSS, FIPS, and state standards.
• Experience in multi-tenant architectures and enterprise governance in Azure.
• Integrating third-party security solutions with Azure.
• Proficiency with IaC: ARM/Bicep, Terraform, GitHub/Azure DevOps, policy as code.
• Translate security requirements into actionable guidance.
• Strong documentation for security baselines and system security plans.
• Experience in security assessments and executive reporting.

Responsibilities

• Lead Azure security architecture and compliance for the DMV modernization project.
• Bridge NCDIT-T, NCDOT DMV, and vendors to ensure regulatory alignment.
• Design secure Azure tenant, configurations, and reporting.
• Assess security controls and produce executive summaries.

Skills

Azure security design

Threat modeling

Azure Defender/Sentinel

Azure security services

Cloud networking security

Security controls mapping

Multi-tenant governance

Third-party integration

IaC (Arm/Bicep)

Policy as code

Architectural guidance

security documentation

Security assessments

Tools

Azure Policy

Key Vault

Monitor

Log Analytics

Job description

Cloud Security Architect - Expert

Supplemental Staffing is needed to support the NCDOT Microsoft Azure cloud tenant build and configuration, specifically focusing on security compliance design, implementation, operations, and assessment.

The role is for a Cloud Security Architect - Expert that will support the ongoing NCDOT DMV Modernization Microsoft Azure cloud infrastructure build, security compliance design, security compliance configuration, and security compliance assessment and reporting.

The primary focus is to lead NCDIT-T in security architecture, configuration, operations, and compliance assessment of the environment and be a bridge between NCDIT, NCDOT DMV, and vendors in delivery of a Microsoft Azure cloud environment that meets security regulatory, organizational, industry security compliance requirements and compliance reporting, balanced with functional requirements.

The complexity of these responsibilities are essential to NCDIT-T to support the build of the Azure tenant so that NCDOT DMV systems can be placed in the cloud securely and meet compliance requirements. NCDIT-T and NCDOT DMV have an aggressive schedule to complete NCDOT DMV modernization efforts.

Skill Matrix:

• Design and maintain secure Azure architectures across identity, networking, data protection, logging/monitoring, and governance. Required 5 Years
• Develop and enforce Azure security standards, policies, and reference architectures aligned to organizational and regulatory requirements. Required 5 Years
• Lead threat modeling, risk assessments, and security reviews for the Azure cloud environment and NCDMV Modernization efforts. Required 5 Years
• Provide expert guidance on Azure-native security tooling (e.g., Defender for Cloud, Sentinel, Azure Policy, Key Vault, Monitor, Log Analytics) Required 5 Years
• Deep expertise with Azure security services Required 5 Years
• Strong understanding of cloud networking security: Zero Trust, routing, segmentation, firewalls, DNS, PKI, IAM, and secure landing zone architectures. Required 5 Years
• Knowledge of compliance frameworks and mapping security controls (NIST 800 53, NIST 800 171, PCI DSS, FIPS, state security standards). Required 5 Years
• Experience designing and evaluating secure multi tenant architectures and enterprise governance models in Microsoft Azure. Required 5 Years
• Expertise integrating third party solutions (Cloudflare, Palo Alto, etc.) with Azure security and monitoring. Required 5 Years
• Proficiency with automation and IaC: ARM/Bicep, Terraform, GitHub/Azure DevOps pipelines, and policy as code. Required 5 Years
• Ability to translate security requirements into actionable architectural and technical guidance and configurations. Required 5 Years
• Strong documentation skills for security standards, baselines, and system security plans. Required 5 Years
• Experience and strong skills in identifying options for security assessments of the Azure environment and producing detailed and executive summary sec Required 5 Years

Benefits at IntelliBee

• Long-Term Stability: Join us on a multi-year opportunities with room to grow.
• Comprehensive Health Coverage: Access quality healthcare benefits to keep you and your family well.
• Future Planning: Enroll in our 401(k) program and invest in your financial security.
• GC Assistance: We support immediate Green Card processing, if required.