DevSecOps Architect

TechDigital Group; United States; On-site; Full time

Job summary

An established industry player is seeking a knowledgeable security consultant to enhance their Azure security capabilities. In this role, you will leverage your expertise in Azure security services and compliance frameworks to configure security tools, support implementation, and ensure ongoing compliance across digital assets. You will also play a crucial role in automating security processes and making technical recommendations for policy remediations. This position offers an exciting opportunity to collaborate with clients on key projects, making a significant impact on the security posture of their solutions.

Qualifications

• Experience in Azure security roles, either certified or extensive hands-on experience.
• Strong knowledge of Azure security services and compliance frameworks.

Responsibilities

• Configure MS security tools to align with security controls based on MARS-E and NIST.
• Support security control implementation and maintain compliance across digital assets.

Skills

Azure security services

Azure network security

DevOps pipeline security

Compliance frameworks (MARS-E, NIST)

Tools

Azure AD

Azure Key Vault

Azure Policy

Azure Defender for Cloud

Azure Sentinel

Azure DevOps

Job description

Job Responsibilities

1. 305_Solution consultant, or AC-100_Cybersecurity Architect experience, or a person who may not be certified, but has worked extensively on Azure security roles.
2. Strong knowledge of Azure security services (e.g., Azure AD, Key Vault, Azure Policy, Azure Defender for Cloud, Sentinel, and Azure DevOps).
3. Strong understanding of Azure network security and virtualization technologies.
4. Responsible for configuring the MS security tools to map to the security controls based on the MARS-E and NIST framework.
5. Support security control implementation and maintain compliance using Azure security services across the digital assets owned, controlled, and/or processed by the solutions.
6. Leverage security tools to implement security controls in the DevOps pipeline. Make technical recommendations on non-compliant components with infrastructure and application technical engineers for policy remediations.
7. Provide an approach that utilizes repeatable, efficient processes, automation, and best practices for end-to-end solution compliance.
8. Participate as a contributor and subject matter expert with clients on key projects and initiatives associated with deploying and securing solutions.