Senior Azure Security Architect
New
J
JobgetherHealthcare cybersecurity
Based in the United States, Scheduling overlap during US Pacific business hours.ContractSenior
Salary95 - 110 USD per hour
Apply NowOpens the employer's application page
Job Details
- Languages
- Professional fluency in English; Spanish proficiency is preferred.
- Experience
- At least 7 years of experience in information security, including a minimum of 3 years designing and hardening Microsoft Azure environments in production.
- Required Skills
- Microsoft AzureHIPAA
Requirements
- At least 7 years of experience in information security.
- At least 3 years designing and hardening Microsoft Azure environments in production.
- Practical knowledge of Azure network security, including hub-and-spoke architecture, Network Security Groups, private endpoints, ExpressRoute, route control, and firewall insertion.
- Experience designing Azure governance frameworks, including management groups, subscriptions, RBAC, Azure Policy, and landing zone security baselines.
- Working knowledge of Microsoft Defender for Cloud, Microsoft Sentinel, or another SIEM platform.
- Experience implementing and managing Azure Policy and cloud security controls.
- Practical experience designing backup, recovery, and disaster recovery for ransomware scenarios, including immutable backups and isolated recovery environments.
- Experience in regulated environments, preferably healthcare, with knowledge of HIPAA requirements and comfort operating under a Business Associate Agreement.
- Professional fluency in English for live technical discussions with US-based stakeholders.
- Availability for approximately one to two hours per business day, with scheduling overlap during US Pacific business hours.
- Preferred: experience with Palo Alto Networks technologies, Azure VMware Solution, VMware NSX, VMware HCX, Epic or comparable EHR platforms, or an MSSP.
- Preferred: knowledge of NIST CSF 2.0, Microsoft Cloud Security Benchmark, CIS Benchmarks, or HHS 405(d) HICP; relevant certifications include AZ-500, SC-100, PCNSE, CISSP, CCSP, or HCISPP.
Responsibilities
- Design and own Azure security architecture across identity, infrastructure, networking, governance, access control, logging, and monitoring.
- Review the Azure environment during implementation and recommend improvements to its security posture.
- Define management group and subscription structures, Azure Policy assignments, security baselines, and written security standards.
- Design Microsoft Entra ID configurations, Conditional Access policies, PIM, and RBAC, applying least-privilege principles.
- Define network segmentation and traffic-flow controls across Azure, ExpressRoute, Palo Alto firewalls, Prisma SD-WAN, clinic connections, VPN access, and internet egress.
- Define logging, retention, and detection coverage using Microsoft Defender for Cloud, Microsoft Sentinel, or the MSSP's monitoring platform.
- Design ransomware resilience and recovery strategies, including immutable and isolated backups, RPOs, RTOs, and recovery-testing requirements.
- Map security controls to the HIPAA Security Rule and account for regulated healthcare data and BAA requirements.
- Participate in technical working sessions with the client and MSSP, and mentor delivery engineers.
View Full Description & ApplyYou'll be redirected to the employer's site
