Senior Azure Government Security – Compliance Architect
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Azure security architect owning compliance, authorization, and monitoring for Florida’s government Decision Intelligence Platform. Securing analytics across up to 35 state agencies.
Responsibilities:
- Develop a comprehensive security compliance control crosswalk to identify, map, and remediate technical gaps against federal and state high-control baselines
- Define and enforce granular role-based access control and end-to-end user lifecycle management aligned with least privilege and MFA
- Architect audit logging, monitoring, and retention specifications for user actions, administrative events, configurations, and raw data access
- Conduct formal reviews of cloud, network, storage, and application configuration baselines and remediate misconfigurations
- Manage vulnerability scanning, coordinate penetration testing, and document resolution evidence for high or critical findings
- Perform third-party risk assessments, map vendor and sub-vendor code dependencies, and produce an SBOM and critical service provider register
- Develop and execute privileged-access reviews to monitor elevated accounts and mitigate credential risk
- Design and integrate incident response workflows, escalation paths, security event reporting, and vulnerability patch management
- Compile and validate technical security artifacts, data-flow diagrams, SSP-style plans, and readiness review dossiers for independent state testing and handover to the State
- Maintain technical accountability for transforming a data analytics POC into a secure, multi-agency enterprise-ready Decision Intelligence Platform for up to 35 Florida state agencies
Requirements:
- 10+ years of comprehensive information security engineering experience
- 5+ years of hands-on cloud security architecture, data environment hardening, or security automation experience
- Documented experience implementing and mapping controls against NIST SP 800-53 and NIST SP 800-171 in federal or state government systems
- Direct experience preparing systems for or operating within FedRAMP High or comparable highly regulated environments
- Hands-on mastery of Azure and Entra ID security parameters, managed identities, automated secrets/key management, and Azure Key Vault
- Strong background in vulnerability management lifecycles, incident response mapping, and formal configuration assessments
- Understanding of third-party risk assessment methodologies and SBOM compilation frameworks
- Verifiable experience acting as a security control assessor or leading technical control validation assessments
- Must be a U.S.-based citizen or resident
- Must successfully clear an FDLE Level II background screening, including fingerprinting, within 5 business days of contract award
- Preferred: experience with Florida Administrative Code Rule 60GG-2 and Section 282.318, Florida Statutes
- Preferred: experience handling CJIS or HIPAA-regulated government data
- Preferred: hands-on Azure Databricks, ADLS Gen2, and Power BI security configuration in Azure Government
- Preferred: experience compiling, submitting, or auditing FedRAMP ATO packages
- Preferred: active CISSP, CISM, or CCSP credential
- Resume must explicitly identify government customers, compliance baselines, architecture scale, personal engineering contributions, deployment/vetting status, and quantifiable results
Benefits:
- Opportunity to work on revolutionary federal IT infrastructure
- Opportunity to grow alongside cutting-edge technology
- Opportunity for professional growth
- Promotion from within
- Equal opportunity employment
Similar Jobs
Grants Compliance & Monitoring Specialist
Grants compliance specialist evaluating federal grant programs for emergency management consulting firm. Developing monitoring tools, trainings, reports, and corrective action recommendations for clients.
OneTrust Consultant – Data Discovery, Assessment Automation, Data Mapping, Cookie Compliance, Incident Management
Consultor OneTrust implementando módulos de privacidade e avaliação de terceiros. Apoiando governança de dados, compliance e treinamento de equipes e clientes.
TPR Compliance Officer
TPR Compliance Officer implementing Tenet’s ethics, compliance, privacy, and security programs. Supporting compliance across hospitals and healthcare facilities in assigned U.S. markets.
Director, Legislative & Regulatory Affairs – Solar
Director leading legislative and regulatory strategy for IGS Energy, a U.S. and Canadian energy retailer. Advancing solar, storage, and distributed-energy policies supporting business growth.
Senior GRC Manager
Senior GRC Manager leading security governance, risk management, and multi-framework compliance for a United States organization. Driving audit readiness, control validation, policy lifecycle management, and executive risk reporting.
Director, Quality, Regulatory
Quality and regulatory director ensuring MANSCAPED grooming products meet safety, quality, and global compliance standards. Leading QMS, supplier quality, product safety, and regulatory strategy.
Senior Director, Regulatory Affairs
Senior regulatory leader guiding global drug approvals for Ardelyx, a commercial-stage biopharmaceutical company. Driving FDA, EMA, and worldwide submissions from development through post-approval lifecycle management.
PCI Compliance Specialist, French
PCI compliance support specialist guiding US merchants through PCI-DSS requirements. Resolving customer issues across phone, chat, email, and ticket channels for VikingCloud’s cybersecurity platform.
Compliance Officer – Onboarding
Compliance Officer reviewing private banking onboarding and AML/CTF requirements for Swissquote, Switzerland’s online banking leader. Supporting regulatory projects, tax compliance, and internal process improvements.
Senior Director, Global Risk and Compliance
NVIDIA Senior Director leading global risk and compliance for AI infrastructure. Developing strategies, managing compliance teams, and advising leadership on risk mitigation.
Associate Director, Regulatory Affairs – Advertising and Promotion
Associate Director guiding FDA advertising and promotion compliance for Definium Therapeutics, a biopharmaceutical company developing psychedelic treatments. Leading promotional review, FDA interactions, submissions, and MLR strategy.
Chief Compliance Officer – US
Chief Compliance Officer building SEC registration, policies, and governance for Allocator One’s private-markets fund platform. Advising fund structuring and GP onboarding across Infra One’s US operating platform.
Compliance & Certifications Associate
Compliance associate building ISO 27001, SOC 2, governance, and vendor-risk processes for Credibur’s non-bank lending platform. Supporting regulatory reporting and legal operations as the fintech scales.
Compliance Specialist – RIA
Compliance Specialist reviewing investor-facing marketing and administering AI governance for Ritholtz Wealth Management, a registered investment advisory firm. Supporting regulatory testing, vendor due diligence, books and records, and compliance operations.
Associate Director – Ethics & Compliance, Post Government Employment, COI Review
Associate Director leading ethics, compliance, and conflict-of-interest reviews for RTX, a global aerospace and defense company. Advising leaders, improving compliance programs, and managing post-government employment restrictions across Collins Aerospace.
Senior Governance, Risk, Compliance Analyst
Senior GRC Analyst evaluating cybersecurity controls, privacy, and enterprise risk for Arctic Wolf’s security operations platform. Leading assurance reviews and compliance improvements across global cross-functional teams.
Associate Director – Ethics & Compliance, Post Government Employment and COI Review
Associate Director leading ethics, compliance, conflict-of-interest, and post-government employment reviews at RTX, an aerospace and defense company. Advising leaders, improving compliance processes, and analyzing enterprise risk trends.
Senior Compliance Analyst
Senior Compliance Analyst investigating suspicious activity and high-risk customers for NALA, a global consumer and B2B payments company. Leading SARs, regulatory responses, transaction analysis, and financial crime risk controls.
Software Compliance and Legalization Promotion Specialist
Software compliance specialist promoting licensing compliance and anti-piracy for Ruvixx, a San Francisco SaaS platform protecting intellectual property and brands. Communicating with customers and supporting compliance strategy execution.
Director, Regulatory Response and Examination Management
Director leading regulatory examinations, inquiries, and enforcement responses for SunStrong Management’s solar asset portfolios. Building scalable readiness, documentation, compliance, and remediation programs.