Sr. Azure Security Architect

Mindlance; Washington (District of Columbia); Hybrid; USD 140,000 - 180,000; Full time

Job summary

A leading company based in Washington, DC is seeking a Sr. Azure Security Architect to enhance their security posture within Azure environments. The role involves designing and implementing secure access controls, managing identity security, and collaborating with various teams to ensure compliance and security best practices. Candidates should have a robust background in security architecture with a focus on Azure Security technologies.

Qualifications

• 12+ years IT experience with security expertise.
• 5 years of hands-on Azure Security experience.
• Experience with enterprise user access governance.

Responsibilities

• Lead architecture and integration of Azure Security components.
• Manage RBAC and access governance across Azure.
• Monitor and investigate access anomalies with Microsoft Sentinel.

Skills

Security Architecture

Access Governance

Microsoft Entra ID

Privileged Identity Management (PIM)

Conditional Access

Scripting Skills

Compliance Frameworks

Tools

PowerShell

Azure CLI

KQL

Job description

Role: Sr. Azure Security Architect
Location: Washington, DC 20433
Duration: Long Term
Hybrid Onsite: 4 Days onsite per week from Day1.

Summary:
Looking for an Sr. Azure Security Architect to lead enterprise-wide access governance and identity security in our Azure environment. You will own the design and implementation of secure, compliant, and scalable access controls using Microsoft Entra ID, PIM, and Azure-native security tools.

Key Responsibilities

• Lead the architecture and integration of Azure Security components including Defender for Cloud, PIM, Conditional Access, Identity Governance, and more.
• Manage RBAC, custom roles, and access governance across Azure subscriptions and management groups.

• Implement and maintain Microsoft Entra ID, Conditional Access, MFA, and Privileged Identity Management (PIM).
• Automate access lifecycle using Entra ID Governance, Access Packages, and Entitlement Management.
• Enforce security baselines via Defender for Cloud, Azure Policy, and Microsoft Purview.
• Monitor and investigate access anomalies with Microsoft Sentinel, Log Analytics, and KQL.
• Collaborate with CloudOps, InfoSec, and Compliance teams to drive zero trust adoption.

Required Skills

• 12+ years of overall IT experience with a strong foundation in security and architecture.

• Minimum 5 years of hands-on experience with Azure Security technologies and Entra ID.
• Experience managing enterprise user access and governance at scale.
• Expert in Microsoft Entra ID, PIM, Conditional Access, and Access Reviews.
• Solid knowledge of Azure Policy, Key Vault, Defender for Cloud, and Sentinel.
• Scripting skills with PowerShell, Azure CLI, and KQL.
• Familiarity with compliance frameworks (ISO 27001, NIST, RBI, etc.)

“Mindlance is an Equal Opportunity Employer and does not discriminate in employment on the basis of – Minority/Gender/Disability/Religion/LGBTQI/Age/Veterans.”