Azure Cloud Administration Specialist

Job Title: Azure Cloud Administration Specialist
Job Type: Full-Time, Contract (W2 Only, not available for C2C, C2H, or 1099, and no sponsorship)
Contract Length: September 1, 2026 – August 31, 2027
Schedule: Monday–Friday, Normal Business Hours, 35 hours/week
Work Model: Hybrid (3 days on-site, 2 days remote) at 1 Centre St, New York, NY 10007

Job Description

Paramint LLC is seeking a highly experienced Azure Cloud Administration Specialist (Specialist III) to support a major New York City government agency under the Department of Citywide Administrative Services (DCAS).

This role will lead the design, implementation, and operationalization of a secure, scalable, and production-ready Azure cloud environment across multiple environments (Development, QA, UAT, Staging, and Production). The selected candidate will play a critical role in ensuring alignment with the Azure Well-Architected Framework, supporting governance, security, performance optimization, and seamless hybrid integration.

The Azure Cloud Specialist will provide both architectural leadership and hands-on expertise across infrastructure design, cloud security, identity management, and DevSecOps practices.

Key ResponsibilitiesAzure Architecture & Design

• Design end-to-end Azure cloud architecture across all environments
• Define subscription models, resource groups, naming conventions, and tagging standards
• Develop secure network topology (VNets, subnets, NSGs)
• Produce architecture diagrams and documentation
• Ensure alignment with Azure Well-Architected Framework principles

Infrastructure Provisioning

• Provision and configure Azure resources (VMs, App Services, SQL, Storage, Key Vault)
• Implement governance controls including RBAC and Azure Policy
• Support Azure Kubernetes Service (AKS) environments
• Validate connectivity and infrastructure readiness across environments

Security Architecture

• Design and implement secure cloud architecture and Zero Trust principles
• Configure network security controls (NSGs, Firewalls, WAF, private endpoints)
• Conduct threat modeling, risk assessments, and security validation
• Ensure compliance with enterprise and regulatory security standards

Identity & Access Management (IAM)

• Configure and manage Azure Entra ID
• Implement RBAC, MFA, Conditional Access, and Privileged Identity Management (PIM)
• Manage Key Vault and secrets protection
• Support data protection, classification, and DLP initiatives

Governance, Risk & Compliance

• Implement Azure policies and enforce governance frameworks
• Ensure compliance with ISO 27001, NIST, and related standards
• Conduct audits, vulnerability assessments, and remediation tracking

DevSecOps & Documentation

• Integrate security into CI/CD pipelines (Azure DevOps / GitHub)
• Provide guidance to engineering teams on secure development practices
• Develop runbooks, architecture diagrams, and operational documentation
• Conduct knowledge transfer to internal teams

Required Qualifications (Mandatory)

Candidates who do not meet the mandatory qualifications will not be considered.

• Extensive experience designing and implementing enterprise Azure cloud architectures
• Strong knowledge of Azure Well-Architected Framework and cloud best practices
• Hands-on experience with Azure networking (VNets, subnets, NSGs, Firewall, WAF, private endpoints)
• Experience provisioning Azure infrastructure (VMs, App Services, Storage, SQL, Key Vault)
• Strong expertise in Identity and Access Management (Azure Entra ID, RBAC, MFA, Conditional Access, PIM)
• Solid understanding of Zero Trust security architecture
• Experience implementing Azure Policy, governance controls, and security baselines
• Knowledge of cloud security, threat modeling, and risk assessment
• Familiarity with compliance frameworks (ISO 27001, NIST, etc.)
• Experience with DevSecOps and CI/CD security integration
• Strong documentation and communication skills
• Ability to collaborate with technical and business stakeholders

Desirable Skills / Experience

• PowerShell and Azure CLI scripting
• Experience with GitHub Actions and Azure DevOps
• Azure cost management and optimization
• Azure certifications (Administrator Associate, Solutions Architect Expert)

Additional Requirements

• Ability to provide off-hours support during deployments or critical incidents
• Strong stakeholder communication and collaboration skills
• Experi…