Cloud Security Architect

RedSalsa Technologies, Inc.; Raleigh (NC); Hybrid; USD 90,000 - 130,000; Full time

Job summary

RedSalsa Technologies, Inc. is seeking a Cloud Security Architect to design and implement secure Azure architectures for the client Modernization program in Raleigh, NC.

The role requires expertise in identity, networking, data protection, logging, and governance, with emphasis on security compliance. The candidate will lead threat modeling, risk assessments, and security reviews, and provide guidance on Azure-native security tooling such as Defender for Cloud, Sentinel, and Key Vault.

Qualifications

• Design and maintain secure Azure architectures across identity, networking, data protection, monitoring, and governance.
• Develop and enforce Azure security standards, policies, and reference architectures.
• Lead threat modeling, risk assessments, and security reviews for Azure environments.
• Provide guidance on Azure-native security tooling (Defender for Cloud, Sentinel, Key Vault, Monitor).
• Proficient in automation and IaC: ARM/Bicep, Terraform, pipelines, policy as code.
• Translate security requirements into actionable architectural guidance.
• Document security standards, baselines, and system security plans.
• Identify options for security assessments and produce executive summaries.

Responsibilities

• Design and implement secure Azure architectures for client projects.
• Lead security assessments, risk reviews, and compliance reporting for Azure environments.

Skills

Azure architecture

Security policies

Threat modeling

Azure tooling

Zero Trust

Compliance mapping

Multi-tenant design

Third-party integrations

IaC automation

Documentation

Executive reporting

Job description

Title : Cloud Security Architect -

Location : Raleigh, NC - Hybrid

Duration : 12 Months

Job Type : C

Supplemental Staffing is needed to support the Client Microsoft Azure cloud tenant build and configuration, specifically focusing on security compliance design, implementation, operations, and assessment in support of client Modernization efforts.

The candidate will need to come on-site on the first day to collect equipment.

All candidates must be local to the Triangle region of North Carolina.

This position may require on-site attendance when business needs warrant in-person participation, such as scheduled meetings or other task-specific activities.

Supplemental Staffing is needed to support the client Microsoft Azure cloud tenant build and configuration, specifically focusing on security compliance design, implementation, operations, and assessment.

The role is for a Cloud Security Architect - Expert that will support the ongoing client Modernization Microsoft Azure cloud infrastructure build, security compliance design, security compliance configuration, and security compliance assessment and reporting.

Skills :

Required / Desired Skills

• Design and maintain secure Azure architectures across identity, networking, data protection, logging/monitoring, and governance. Required 5 Years
• Develop and enforce Azure security standards, policies, and reference architectures aligned to organizational and regulatory requirements. Required 5 Years
• Lead threat modeling, risk assessments, and security reviews for the Azure cloud environment and NCDMV Modernization efforts. Required 5 Years
• Provide expert guidance on Azure-native security tooling (e.g., Defender for Cloud, Sentinel, Azure Policy, Key Vault, Monitor, Log Analytics). Required 5 Years
• Deep expertise with Azure security services. Required 5 Years
• Strong understanding of cloud networking security: Zero Trust, routing, segmentation, firewalls, DNS, PKI, IAM, and secure landing zone architectures. Required 5 Years
• Knowledge of compliance frameworks and mapping security controls (NIST 800 53, NIST 800 171, PCI DSS, FIPS, state security standards). Required 5 Years
• Experience designing and evaluating secure multi tenant architectures and enterprise governance models in Microsoft Azure. Required 5 Years
• Expertise integrating third party solutions (Cloudflare, Palo Alto, etc.) with Azure security and monitoring. Required 5 Years
• Proficiency with automation and IaC: ARM/Bicep, Terraform, GitHub/Azure DevOps pipelines, and policy as code. Required 5 Years
• Ability to translate security requirements into actionable architectural and technical guidance and configurations. Required 5 Years
• Strong documentation skills for security standards, baselines, and system security plans. Required 5 Years
• Experience and strong skills in identifying options for security assessments of the Azure environment and producing detailed and executive summary sec. Required 5 Years