Job Title: Azure Cloud Security Architect Duration: 3 month contract Location: Milwaukee, WI Hybrid Pay: $125-130/hr This role will support cloud security, vulnerability remediation, infrastructure protection, and governance throughout the transition. Key Responsibilities • Cloud Architecture & Vulnerability Baseline: Finalize Azure architecture security reviews and coordinate with legacy infrastructure teams to remediate critical/high vulnerabilities identified in the security baseline. Rescan hosting and identity environments (Azure, on-premises datacenters, and Active Directory) transitioning to the new organization. • IaC & Penetration Testing Remediation: Perform static security scans on Azure AD Infrastructure as Code (IaC) codebases. Coordinate remediation of critical/high vulnerabilities identified through Azure penetration testing. • Cloud Security Posture Management (CSPM) & SaaS Protection: Implement CrowdStrike CSPM, conduct posture vulnerability testing, remediate critical findings, and perform post-remediation testing. Integrate Falcon Shield for the Azure Jump Domain. • Data Security & Repository Protection: Scan data repositories using Cyera, coordinate data volume tier expansions for migration pipelines, and remediate identified data exposure vulnerabilities. • Azure Databricks Security & Governance: • Review and secure approval for TLS inspection exceptions, including risk documentation, compensating controls, and ServiceNow sign-off. • Validate private-by-design architecture, enforcing VNet injection, Secure Cluster Connectivity (no public IPs), private endpoints, and private DNS. • Coordinate GSOC logging ingestion and retention policies, including 90-day blob storage retention before full GSOC integration. • Oversee Entra ID and IAM access governance for Databricks workspaces, Unity Catalog, service principals, and managed identities. • Ensure centralized egress routing through Azure Firewall for all approved external integrations.