Cloud Security Architect

SunTechPros Inc.; Raleigh (NC); On-site; USD 150,000 - 210,000; Full time

Job summary

SunTechPros Inc. in Raleigh, NC seeks a Cloud Security Architect - Expert to design and maintain secure Azure architectures across identity, networking, data protection, and governance, leading threat modeling and risk assessments.

You will implement Azure security standards, policies, and reference architectures aligned to regulatory requirements, and guide multi-tenant governance with Azure-native tooling and IaC.

Qualifications

• Design and implement Azure security architectures across identity, networking, data protection, logging, monitoring and governance.
• Lead threat modeling, risk assessments, and security reviews for the Azure cloud environment.
• Develop and enforce Azure security standards, policies, and reference architectures aligned to regulatory requirements.
• Translate security requirements into actionable architectural guidance and configurations.

Responsibilities

• Design and maintain secure Azure architectures across identity, networking, data protection, logging/monitoring, and governance.
• Lead threat modeling, risk assessments, and security reviews for the Azure cloud environment and modernization efforts.
• Provide expert guidance on Azure-native security tooling (Defender for Cloud, Sentinel, Azure Policy, Key Vault, Monitor, Log Analytics).
• Design and evaluate secure multi-tenant architectures and enterprise governance models in Azure.

Skills

Azure security

Threat modeling

Security reviews

Zero Trust

IAM

PCI/DSS

NIST CSF

Terraform

ARM/Bicep

Policy as code

Cloudflare

Palo Alto

Tools

Defender for Cloud

Azure Sentinel

Azure Policy

Key Vault

Monitor

Log Analytics

GitHub/Azure DevOps

Terraform

Job description

Cloud Security Architect - Expert (809185) in Raleigh, NC - Onsite

Design and maintain secure Azure architectures across identity, networking, data protection, logging/monitoring, and governance.

Develop and enforce Azure security standards, policies, and reference architectures aligned to organizational and regulatory requirements.

Lead threat modeling, risk assessments, and security reviews for the Azure cloud environment and NCDMV Modernization efforts.

Provide expert guidance on Azure-native security tooling (e.g., Defender for Cloud, Sentinel, Azure Policy, Key Vault, Monitor, Log Analytics)

Deep expertise with Azure security services

Strong understanding of cloud networking security: Zero Trust, routing, segmentation, firewalls, DNS, PKI, IAM, and secure landing zone architectures.

Knowledge of compliance frameworks and mapping security controls (NIST 800 53, NIST 800 171, PCI DSS, FIPS, state security standards).

Experience designing and evaluating secure multi tenant architectures and enterprise governance models in Microsoft Azure.

Expertise integrating third party solutions (Cloudflare, Palo Alto, etc.) with Azure security and monitoring.

Proficiency with automation and IaC: ARM/Bicep, Terraform, GitHub/Azure DevOps pipelines, and policy as code.

Ability to translate security requirements into actionable architectural and technical guidance and configurations.

Strong documentation skills for security standards, baselines, and system security plans.

Experience and strong skills in identifying options for security assessments of the Azure environment and producing detailed and executive summary sec