Azure Security Architect

Job Summary

Expert Supplemental Staffing is needed to support the NCDOT Microsoft Azure cloud tenant build and configuration, specifically focusing on security compliance design, implementation, operations, and assessment.

About the Role

The role is for a Cloud Security Architect - Expert that will support the ongoing NCDOT DMV Modernization Microsoft Azure cloud infrastructure build, security compliance design, security compliance configuration, and security compliance assessment and reporting.

Responsibilities

• Lead NCDIT-T in security architecture, configuration, operations, and compliance assessment of the environment
• Be a bridge between NCDIT, NCDOT DMV, and vendors in delivery of a Microsoft Azure cloud environment that meets security regulatory, organizational, industry security compliance requirements and compliance reporting, balanced with functional requirements
• Support the build of the Azure tenant so that NCDOT DMV systems can be placed in the cloud securely and meet compliance requirements
• Lead threat modeling, risk assessments, and security reviews for the Azure cloud environment and NCDMV Modernization efforts
• Provide expert guidance on Azure-native security tooling (e.g., Defender for Cloud, Sentinel, Azure Policy, Key Vault, Monitor, Log Analytics)
• Design and maintain secure Azure architectures across identity, networking, data protection, logging/monitoring, and governance
• Develop and enforce Azure security standards, policies, and reference architectures aligned to organizational and regulatory requirements
• Provide expert guidance on Azure-native security tooling (e.g., Defender for Cloud, Sentinel, Azure Policy, Key Vault, Monitor, Log Analytics)
• Deep expertise with Azure security services
• Strong understanding of cloud networking security: Zero Trust, routing, segmentation, firewalls, DNS, PKI, IAM, and secure landing zone architectures
• Knowledge of compliance frameworks and mapping security controls (NIST 800 53, NIST 800 171, PCI DSS, FIPS, state security standards)
• Experience designing and evaluating secure multi tenant architectures and enterprise governance models in Microsoft Azure
• Expertise integrating third party solutions (Cloudflare, Palo Alto, etc.) with Azure security and monitoring
• Proficiency with automation and IaC: ARM/Bicep, Terraform, GitHub/Azure DevOps pipelines, and policy as code
• Ability to translate security requirements into actionable architectural and technical guidance and configurations
• Strong documentation skills for security standards, baselines, and system security plans
• Experience and strong skills in identifying options for security assessments of the Azure environment and producing detailed and executive summary security reports

Requirements

• 5 Years Experience Developing and enforcing Azure security standards, policies, and reference architectures aligned to organizational and regulatory requirements
• 5 Years Experience Leading threat modeling, risk assessments, and security reviews for the Azure cloud environment and NCDMV Modernization efforts
• 5 Years Experience Providing expert guidance on Azure-native security tooling (e.g., Defender for Cloud, Sentinel, Azure Policy, Key Vault, Monitor, Log Analytics)
• 5 Years Experience Deep expertise with Azure security services
• 5 Years Experience Strong understanding of cloud networking security: Zero Trust, routing, segmentation, firewalls, DNS, PKI, IAM, and secure landing zone architectures
• 5 Years Experience Knowledge of compliance frameworks and mapping security controls (NIST 800 53, NIST 800 171, PCI DSS, FIPS, state security standards)
• 5 Years Experience Experience designing and evaluating secure multi tenant architectures and enterprise governance models in Microsoft Azure
• 5 Years Experience Expertise integrating third party solutions (Cloudflare, Palo Alto, etc.) with Azure security and monitoring
• 5 Years Experience Proficiency with automation and IaC: ARM/Bicep, Terraform, GitHub/Azure DevOps pipelines, and policy as code
• 5 Years Experience Ability to translate security requirements into actionable architectural and technical guidance and configurations
• 5 Years Experience Strong documentation skills for security standards, baselines, and system security plans
• 5 Years Experience and strong skills in identifying options for security assessments of the Azure environment and producing detailed and executive summary security reports

Qualifications

• Master's degree in Computer Science, Information Systems, Cybersecurity, or related field
• CISSP, CISM, or equivalent certifications preferred

Skills

• Design and maintain secure Azure architectures across identity, networking, data protection, logging/monitoring, and governance
• Develop and enforce Azure security standards, policies, and reference architectures aligned to organizational and regulatory requirements
• Lead threat modeling, risk assessments, and security reviews for the Azure cloud environment and NCDMV Modernization efforts
• Provide expert guidance on Azure-native security tooling (e.g., Defender for Cloud, Sentinel, Azure Policy, Key Vault, Monitor, Log Analytics)
• Deep expertise with Azure security services
• Strong understanding of cloud networking security: Zero Trust, routing, segmentation, firewalls, DNS, PKI, IAM, and secure landing zone architectures
• Knowledge of compliance frameworks and mapping security controls (NIST 800 53, NIST 800 171, PCI DSS, FIPS, state security standards)
• Experience designing and evaluating secure multi tenant architectures and enterprise governance models in Microsoft Azure
• Expertise integrating third party solutions (Cloudflare, Palo Alto, etc.) with Azure security and monitoring
• Proficiency with automation and IaC: ARM/Bicep, Terraform, GitHub/Azure DevOps pipelines, and policy as code
• Ability to translate security requirements into actionable architectural and technical guidance and configurations
• Strong documentation skills for security standards, baselines, and system security plans
• Experience and strong skills in identifying options for security assessments of the Azure environment and producing detailed and executive summary security reports

Benefits

• Long-Term Stability
• Comprehensive Health Coverage
• Future Planning: Enroll in our 401(k) program and invest in your financial security
• GC Assistance: We support immediate Green Card processing, if required