Sr Cloud/Azure Security Architect

R Systems; San Jose (CA); On-site; USD 180,000 - 240,000; Full time

Job summary

R Systems is seeking a Lead Enterprise Azure Security Architect to own cloud security across Azure and AWS, with deep expertise in Entra ID, Defender for Cloud, and Zero Trust design.

You will implement DevSecOps and IaC (Terraform/Bicep), enforce data protection, and oversee security governance, risk remediation, and compliance across cloud environments.

Qualifications

• Experience leading Azure security architecture and security design across cloud environments.
• Proficient in securing Azure and AWS, including IAM, governance, and networking.
• Strong knowledge of Palo Alto security solutions and cloud security tooling.
• Experience with data security, privacy controls, and regulatory compliance (PCI-DSS, SOC2, GDPR).
• Proficiency in DevSecOps, policy-as-code, and infrastructure as code (Terraform/Bicep).

Responsibilities

• Lead enterprise Azure security architecture and design across Entra ID, Defender for Cloud, Sentinel, and Zero Trust.
• Own multi-cloud security across Azure and AWS, including IAM, networks, and migration security workstreams.
• Architect and govern Palo Alto security solutions including NGFW, Prisma Cloud/Access, and XSOAR/XSIAM integrations.
• Drive data security and compliance with Purview, DLP, classification, encryption, and compliance frameworks.
• Implement IaC and CI/CD security, policy-as-code, container/Kubernetes security, and secure cloud governance.

Skills

Azure security architecture

Multi-cloud security

Palo Alto security solutions

Data security & compliance

DevSecOps & IaC

Terraform/Bicep

Tools

Terraform

Bicep

CI/CD security

Container security

Kubernetes security

Job description

• Lead enterprise Azure Security Architecture with deep expertise in Entra ID, Defender for Cloud, Sentinel, Azure Policy, Key Vault, networking, landing zones, and Zero Trust security design.
• Own multi-cloud security across Azure and AWS, including AWS IAM, Organizations, VPC, KMS, Security Hub, GuardDuty, and AWS-to-Azure migration security workstreams.
• Architect and govern Palo Alto security solutions including NGFW, Panorama, Prisma Cloud, Prisma Access/SASE, Cortex XDR/XSIAM, cloud posture management, and network segmentation.
• Drive data security and compliance through Microsoft Purview, DLP, data classification, encryption, key management, PCI-DSS, SOC2, NIST, GDPR controls, and cloud data platform security.
• Implement DevSecOps and Infrastructure as Code using Terraform/Bicep, CI/CD security, policy-as-code, container/Kubernetes security, automation, threat modeling, and secure cloud governance.

Preferred Skills

• AZ-500, SC-100, CISSP, CCSP, PCNSE, AWS Security Specialty.