SASE Engineer

Openkyber; United States; On-site; USD 110,000 - 117,000; Full time

Job summary

OpenKyber is seeking an Enterprise Architect (Azure Security Architect) to implement security controls across our cloud environment for a key government client. You will lead architecture, risk management, and security testing, ensuring compliance and strong identity/access controls.

Ideal candidates have 5+ years in Azure security with IAM and Zero Trust experience, plus Gov-Cloud exposure. Collaboration with auditors and stakeholders is essential.

Qualifications

• Bachelor's degree in technology field; master's degree preferred.
• 5+ years cyber-related experience in Azure in a security/risk role.
• Experience with Azure Gov-Cloud is a plus.
• Proven leadership in security policy and implementation across Azure.

Responsibilities

• Implement security controls for cloud environment and testing.
• Lead end-to-end security across Azure regions and CI/CD pipelines.
• Collaborate with clients, leadership, and auditors.
• Maintain and improve Gov-Fed compliance posture (FISMA/FedRAMP).

Skills

Azure security

IAM

Zero Trust

Gov-Cloud

Vulnerability testing

Risk management

CI/CD security

Education

Bachelor's degree in technology field

Master's degree preferred

Tools

Microsoft Defender for Cloud

Entra ID

Key Vault

Defender for Endpoint

Job description

Location: Berkeley Heights, NJ Salary: $80.00 USD Hourly - $85.00 USD Hourly

Description:

Job Title: Enterprise Architect (Azure Security Architect)

Location: Berkeley Heights, NJ / Greenwood Village, CO / Omaha, NE / Alpharetta, GA (Onsite 5 Days)

Duration: Contract To Hire

Job Description: The successful candidate is responsible for implementing technology initiatives to secure our key government client's cloud environment. The selected candidate will be accountable for assisting in strategic planning and architecture and securing enterprise information by identifying network and application security requirements, implementing and testing security controls and procedures.

The primary areas of focus for the candidate are to enable cloud cybersecurity controls and compliance requirements and remediation programs based on business priorities and risks to address cybersecurity, cyber defense, and business needs of our customer.

Experience Required: (Microsoft Azure Cloud experience preferred; Gov-Cloud experience preferred)

Education: Bachelor's degree in a technology field; master's degree preferred.

5+ years' cyber-related experience in a commercial environment with Azure, in a technical information security and risk management role.

5+ years managing security policies and initiatives in Azure.

Identity Access and Management concepts, multifactor authentication, SSO/Federation.

Privileged Access Management key concepts.

Ability to set up and configure Azure security platforms and function as an overall lead managing end-to-end security across Azure cloud regions.

Network and application vulnerability testing as it relates to Azure systems.

Security concepts and tools related to CI/CD pipelines and software scanning.

Able to demonstrate understanding of Information Security and Risk Management capabilities related to cloud computing across Windows and Linux, with demonstrated direct experience in the following domains:

• Identity, Credential and Access Management (ICAM)
• Authentication and Authorization, including SSO and Identity Federation
• Zero Trust Model
• Defense-in-Depth
• Governance and Compliance
• Securing Data
• Securing the Operating System
• Protecting the Network Layer
• Continuous Diagnostics and Mitigation, Alerting, Audit Trail, and Incident Response
• Cloud Core Platform: Compute, Storage, Networking

Other experience desired: Government environments and Gov-Cloud experience.

Certifications: CISSP, CCSP, Azure/AWS/Google security-specific training and certification.

CrowdStrike Falcon EDR for Azure.

Managing and maintaining FISMA and FedRAMP compliance for a government information system.

Demonstrated experience collaborating directly with external clients, business leadership, and auditors.

5+ years firsthand experience working with various Azure security tools/platforms such as:

• Extended Detection and Response (XDR): Microsoft Defender for Cloud Apps, Microsoft Defender for Endpoint, Microsoft Defender for Office 365, Microsoft Defender for Identity
• Data Protection: Microsoft Purview, Microsoft Information Protection, DLP, OneTrust, Kubernetes
• Identity and Access Management (IAM): Zero Trust, Azure IAM and AWS IAM, Entra ID (Azure AD), Multitenant Organization (MTO), Lighthouse, Key Vault, Conditional Access
• Monitoring and Compliance: Microsoft Sentinel, Microsoft Defender for Cloud (MDC) Entra ID (formerly Azure AD), M365

By providing your phone number, you consent to: (1) receive automated text messages and calls from OpenKyber and its affiliates to such phone number regarding job opportunities, your job application, and for other related purposes. Message & data rates apply and message frequency may vary. Consistent with OpenKyber's Privacy Policy, information obtained from your consent will not be shared with third parties for marketing/promotional purposes. Reply STOP to opt out of receiving telephone calls and text messages from OpenKyber and HELP for help.