Cloud Security Architect

Refulgent Technologies Inc.; Raleigh (NC); Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

Refulgent Technologies Inc. is seeking a Cloud Security Architect to lead security architecture, configuration, operations, and compliance assessments for a Microsoft Azure cloud build in Raleigh, NC.

The role involves bridging client and vendor efforts to ensure an Azure environment that meets regulatory, organizational, and industry security requirements. The candidate will drive threat modeling, risk assessments, and security reviews while implementing Azure-native security tooling and

Qualifications

• Extensive experience designing secure Azure architectures across identity, networking, data protection, logging/monitoring, and governance.
• Ability to translate security requirements into actionable architectural guidance.
• Experience with compliance frameworks: NIST 800-53, NIST 800-171, PCI DSS, FIPS.
• Experience integrating third-party solutions with Azure security.
• Proficiency with IaC and automation (ARM/Bicep, Terraform, GitHub/Azure DevOps).

Responsibilities

• Lead security architecture, configuration, operations, and compliance assessment of the Azure cloud environment.
• Ensure Azure cloud meets regulatory, organizational, and industry security compliance requirements.
• Bridge client and vendors to deliver a secure Microsoft Azure cloud environment.
• Develop and enforce Azure security standards, policies, and reference architectures.
• Conduct threat modeling, risk assessments, and security reviews for the Azure environment and modernization efforts.

Skills

Azure security services

Threat modeling

Security governance

Zero Trust architecture

IAM and PKI

Automation IaC (ARM/Bicep/Terraform)

Tools

Azure Defender

Azure Sentinel

Key Vault

Monitor/Log Analytics

Azure Policy

Palo Alto / Cloudflare integrations

Job description

Job: Cloud Security Architect

Location: Raleigh, NC ( Hybrid)

Must be local to Traigle region of NC, No relocation

The role is for a Cloud Security Architect - Expert that will support the ongoing NCDOT DMV Modernization Microsoft Azure cloud infrastructure build, security compliance design, security compliance configuration, and security compliance assessment and reporting.

The primary focus is to lead Client in security architecture, configuration, operations, and compliance assessment of the environment and be a bridge between Client, and vendors in delivery of a Microsoft Azure cloud environment that meets security regulatory, organizational, industry security compliance requirements and compliance reporting, balanced with functional requirements.

The complexity of these responsibilities are essential to Client to support the build of the Azure tenant so that NCDOT DMV systems can be placed in the cloud securely and meet compliance requirements.

Required Skills:

• Design and maintain secure Azure architectures across identity, networking, data protection, logging/monitoring, and governance.


• Develop and enforce Azure security standards, policies, and reference architectures aligned to organizational and regulatory requirements.


• Lead threat modeling, risk assessments, and security reviews for the Azure cloud environment and NCDMV Modernization efforts.


• Provide expert guidance on Azure-native security tooling (e.g., Defender for Cloud, Sentinel, Azure Policy, Key Vault, Monitor, Log Analytics)


• Deep expertise with Azure security services


• Strong understanding of cloud networking security: Zero Trust, routing, segmentation, firewalls, DNS, PKI, IAM, and secure landing zone architectures.


• Knowledge of compliance frameworks and mapping security controls (NIST 800 53, NIST 800 171, PCI DSS, FIPS, state security standards).


• Experience designing and evaluating secure multi tenant architectures and enterprise governance models in Microsoft Azure.


• Expertise integrating third party solutions (Cloudflare, Palo Alto, etc.) with Azure security and monitoring.


• Proficiency with automation and IaC: ARM/Bicep, Terraform, GitHub/Azure DevOps pipelines, and policy as code.


• Ability to translate security requirements into actionable architectural and technical guidance and configurations.


• Strong documentation skills for security standards, baselines, and system security plans.


• Experience and strong skills in identifying