Azure Cloud Administration Specialist

Title: Job Title: Azure Cloud Administration Specialist

Location: New York, NY (Hybrid)

Duration: 12+ Months

Previous State Client Experience is required

Key Responsibilities:

• Azure Architecture & Design
• Design end-to-end Azure architecture across all environments.
• Define subscription structure, resource groups, naming conventions, and tagging standards.
• Design secure network topology (VNets, subnets, NSGs).
• Produce architecture diagrams for stakeholder approval.
• Ensure alignment with Azure Well-Architected Framework and best practices for security, scalability, resilience, and governance.
• Infrastructure Provisioning
• Provision and configure Azure resources (VNets, App Services, VMs, SQL, Storage, Key Vault).
• Implement RBAC, Azure Policies, and governance controls.
• Ensure environment readiness for Dev, Test, UAT, and Production.
• Azure Kubernetes Service (AKS) provisioning and support
• Validate connectivity and infrastructure configuration.
• Apply Zero Trust principles aligned with DCAS and OTI Cyber GRC standards.
• Security Architecture
• Define Azure security strategy and secure cloud architecture.
• Implement network security (NSGs, Firewall/WAF, private endpoints).
• Conduct threat modeling, risk assessments, and security validation.
• Ensure compliance with security and regulatory standards.
• Identity & Access Management (IAM)
• Configure Azure Entra ID integration and identity management.
• Implement RBAC, MFA, Conditional Access, and PIM.
• Manage Azure Key Vault and secrets protection.
• Support data protection, classification, and DLP controls.
• Coordinate with GRC teams for compliance.
• Governance, Risk & Compliance
• Implement Azure policies and security baselines.
• Ensure compliance with ISO 27001, NIST, and related frameworks.
• Conduct audits, vulnerability assessments, and remediation tracking.
• DevSecOps & Documentation
• Integrate security into CI/CD pipelines and perform security reviews.
• Provide architecture guidance to engineering teams.
• Develop runbooks, operational documentation, and architecture diagrams.
• Conduct knowledge transfer to internal teams.
• The consultant will ensure the applications are securely deployed, reliably operated, and scalable enough to handle public use while meeting strict government security and performance requirements.

Minimum Requirements:

• Extensive experience designing and implementing Azure cloud architecture across enterprise environments
• Strong knowledge of Azure Well-Architected Framework and cloud best practices (security, scalability, resilience, governance)
• Hands-on experience with Azure networking (VNets, subnets, NSGs, Azure Firewall, WAF, private endpoints)
• Experience with Azure infrastructure provisioning (App Services, VMs, Storage, SQL, Key Vault etc.)
• Strong expertise in Identity and Access Management (Azure Entra ID, RBAC, MFA, Conditional Access, PIM)
• Solid understanding of Zero Trust security architecture and implementation
• Experience implementing Azure Policy, governance controls, and security baselines
• Knowledge of cloud security, threat modeling, and risk assessment practices
• Familiarity with regulatory and compliance frameworks (ISO 27001, NIST, etc.)
• Experience with DevSecOps practices and CI/CD security integration
• Strong documentation skills (architecture diagrams, runbooks, technical documentation)
• Excellent communication, stakeholder engagement, and collaboration skills

DESIRABLE SKILLS/EXPERIENCE:

• PowerShell and Azure CLI scripting
• Azure cost, GitHub Actions
• Cost Management
• Azure certifications:

o Azure Administrator Associate

o Azure Solutions Architect Expert

SPECIAL REQUIREMENTS:

• Require off-hour support during production cutover or to troubleshoot, resolve critical issues