Hiring for : MS + Azure Architect : Dallas, TX (Hybrid)

Role : MS + Azure Architect

Location : Dallas, TX (Hybrid)

Client : Automotive

Contract : 6 Months C2H

Interview : Video

Primary Responsibilities

Security & Landing Zone Design: Lead joint workshops with Cloud/Infrastructure teams to define security guardrails feeding the landing zone design (identity model, network segmentation principles, logging/retention requirements, encryption standards, tagging, and policy strategy).Governance & Access: Review Management Group hierarchy, subscription structure, custom RBAC role definitions, PIM eligible/active role design, and break-glass account setup across all tenants.Network & Topology: Validate hub-spoke topology, NSG/ASG rule sets, firewall placement, private endpoint usage, DDoS protection plans, and DNS architecture against security baselines.Policy Enforcement: Validate Azure Policy initiatives (deny public IP, enforce encryption at rest/in transit, allowed resource types/regions, mandatory tagging) assigned at each Management Group and subscription scope.Logging & Monitoring: Validate central Log Analytics workspace design, diagnostic settings scope across resource types, retention periods, and confirm workspace alignment for Sentinel onboarding.Secrets & Compliance: Review Key Vault architecture (per-subscription vaults, RBAC vs. access policies, soft-delete/purge protection, private endpoints) per landing zone.Audit & Sign-Off: Score subscription tiers (Prod, Non-Prod, Identity, Connectivity) against Azure Security Benchmark / CIS controls; issue formal security sign-offs or remediation lists prior to tool deployment.

Key Deliverables

Process Flows & Architecture DiagramsMentorship and knowledge transfer to client project team membersAuthoring/co-authoring technical and security project deliverablesThought leadership and hands-on technical configuration/development

Custom Skills (EXPERT/ADVANCED/NONE)

MS + Azure ArchitectAzure Cloud Security ArchitectInfrastructureAzure Sentinel / Log AnalyticsAzure Policy & RBAC / PIM