Cloud Security Architect (Azure)

Cloud Security Architect (Azure)

12 Month Contract

Fully Remote - Candidates must be in Germany

Searching for a strong Cloud Security Architect (Microsoft focused) for my clients Security Consulting practice, helping clients securely transform and modernize their businesses through Microsoft technologies.

As a trusted advisor, you will lead the design and delivery of Azure security solutions for enterprise clients, with a particular focus on highly regulated sectors including Financial Services, Insurance, Banking, Capital Markets. You will work directly with client stakeholders, security leaders, enterprise architects and delivery teams to define cloud security strategies, establish target-state architectures and deliver secure cloud transformation programmes.

Security Consulting & Client Advisory

• Act as a trusted advisor to client executives, security leaders and technology stakeholders.
• Lead cloud security assessments, strategy engagements and architecture reviews.
• Develop cloud security roadmaps aligned to business, regulatory and operational requirements.
• Advise clients on cloud operating models, governance frameworks and security transformation initiatives.
• Present complex security concepts to both technical and non-technical audiences.

Azure Cloud Security Architecture

• Lead the design and implementation of secure Azure-based architectures.
• Develop Azure Landing Zones and cloud governance frameworks aligned to Microsoft's Cloud Adoption Framework.
• Define cloud security controls, guardrails, reference architectures and design standards.
• Architect secure hybrid and cloud-native solutions across enterprise environments.
• Perform architecture governance and provide design assurance throughout project delivery.

Identity & Zero Trust Architecture

• Design enterprise identity solutions leveraging:
• Microsoft Entra ID
• Conditional Access
• Multi-Factor Authentication
• Privileged Identity Management (PIM)
• Identity Governance
• Role-Based Access Control (RBAC)
• Drive implementation of Zero Trust security principles across client environments.

Security & Compliance Solutions

• Design and advise on implementation of:
• Microsoft Defender for Cloud
• Microsoft Sentinel
• Defender XDR
• Microsoft Purview
• Azure Key Vault
• Azure Firewall
• Web Application Firewall (WAF)
• Network Security Controls
• Azure Policy
• Security Automation and SOAR capabilities
• Conduct security posture assessments and recommend remediation strategies.

Cloud Security Transformation

• Lead workstreams within major cloud transformation, migration and modernization programmes.
• Integrate security-by-design principles into cloud adoption initiatives.
• Support DevSecOps adoption and secure software delivery practices.
• Develop target operating models and cloud governance frameworks.

Required Experience

• Proven experience delivering cloud security consulting engagements for enterprise clients.
• Experience working in a client-facing architecture, advisory or consulting role.
• Demonstrated success leading stakeholder workshops and executive discussions.
• Experience defining cloud security strategies and transformation roadmaps.
• 8+ years of cyber security experience with significant focus on Microsoft technologies.
• 5+ years designing and delivering Azure security solutions at enterprise scale.
• Strong hands-on experience across:
• Microsoft Azure
• Microsoft Security Portfolio
• Cloud Security Architecture
• Identity & Access Management
• Cloud Governance
• Security Operations
• DevSecOps