Cloud Security Architect

Skill

Required / Desired

Amount
of Experience

No of years of experience you have

Design and maintain secure Azure architectures across identity, networking, data protection, logging/monitoring, and governance.

Required

5 Years

Develop and enforce Azure security standards, policies, and reference architectures aligned to organizational and regulatory requirements.

Required

5 Years

Lead threat modeling, risk assessments, and security reviews for the Azure cloud environment and NCDMV Modernization efforts.

Required

5 Years

Provide expert guidance on Azure-native security tooling (e.g., Defender for Cloud, Sentinel, Azure Policy, Key Vault, Monitor, Log Analytics)

Required

5 Years

Deep expertise with Azure security services

Required

5 Years

Strong understanding of cloud networking security: Zero Trust, routing, segmentation, firewalls, DNS, PKI, IAM, and secure landing zone architectures.

Required

5 Years

Knowledge of compliance frameworks and mapping security controls (NIST 800 53, NIST 800 171, PCI DSS, FIPS, state security standards).

Required

5 Years

Experience designing and evaluating secure multi tenant architectures and enterprise governance models in Microsoft Azure.

Required

5 Years

Expertise integrating third party solutions (Cloudflare, Palo Alto, etc.) with Azure security and monitoring.

Required

5 Years

Proficiency with automation and IaC: ARM/Bicep, Terraform, GitHub/Azure DevOps pipelines, and policy as code.

Required

5 Years

Ability to translate security requirements into actionable architectural and technical guidance and configurations.

Required

5 Years

Strong documentation skills for security standards, baselines, and system security plans.

Required

5 Years

Experience and strong skills in identifying options for security assessments of the Azure environment and producing detailed and executive summary sec

Required

5 Years

Q1: Absences greater than two weeks MUST be approved by CAI management in advance, and contact information must be provided to CAI so that the resource can be reached during his or her absence. The Client has the right to dismiss the resource if he or she does not return to work by the agreed upon date. Do you accept this requirement? (Yes/No)

Q2: The candidate to be local to the Triangle area. While most working days will be remote, there may be the occasional need to be onsite at customer offices in NCDOT’s Wake/Durham County offices. Do you accept this requirement? (Yes/No)

Q3: ONLY SUBMIT CANDIDATES CURRENTLY LIVING IN THE RALEIGH/DURHAM/CHAPEL HILL, NC AREA. Please list where your candidate is currently located.

Q4: Please indicate how soon this candidate is available to start work. Vendors are encouraged to submit candidates that are available for the duration of the assignment. (Yes/No)