Senior Azure Government Security & Compliance Architect

• Position Type: Part-Time Consultant / Technical Vetting & Compliance Authority
• Target Allocation: 8–10 hours/week average (Note: Workload rises substantially during security engineering phases, technical readiness reviews, and the structural execution of Deliverables 10, 11, and 12).
• Technical Reality: This is an elite compliance role. The security architecture, authorization documentation, and continuous monitoring controls are too complex to distribute casually among traditional software developers. You will hold complete technical ownership over the platform's defensive validation strategy.
• Compensation Type: Milestone / Deliverable-Based Fixed-Price Engagement.

• Compliance Gap Analysis: Develop a comprehensive security compliance control crosswalk to identify, map, and remediate technical gaps against strict federal and state high-control baselines.
• Identity & Access Architecture: Define and enforce a granular, role-based access control (RBAC) framework and end-to-end user lifecycle management model aligned strictly to least-privilege principles and multi-factor authentication (MFA) enforcement.
• Audit Logging & Monitoring: Architect comprehensive audit logging, monitoring, and retention specifications for user actions, administrative events, system configurations, and raw data access layers to ensure absolute traceability.
• Configuration Assessment: Conduct exhaustive, formal reviews of cloud, network, storage, and application configuration baselines to actively identify, catalog, and fix misconfigurations.
• Vulnerability & Pentest Coordination: Manage internal and external vulnerability scanning protocols, orchestrate formal penetration testing events, and document the rigorous technical evidence confirming the resolution of high or critical findings.
• Supply Chain Vetting: Perform comprehensive third-party risk assessments, map vendor/sub-vendor code dependencies, and produce a verified Software Bill of Materials (SBOM) alongside a critical service provider register.
• Privilege Access Governance: Develop and execute structured privilege-access reviews to monitor elevated account allocations, analyze account activities, and mitigate credential risk exposure.
• Incident Response Integration: Design and integrate actionable incident response workflows, contact escalation paths, security event reporting routines, and vulnerability patch management lifecycles that conform to state policies.
• Authorization Package Compilation: Compile and validate all technical security artifacts, data-flow diagrams, system security plans (SSP-style), and readiness review dossiers required to clear independent state testing and ensure a seamless handover to the State.

• Experience Baseline: 10+ years of comprehensive information security engineering experience.
• Cloud Depth: 5+ years of dedicated, hands-on cloud security architecture, data environment hardening, or security automation work.
• Government Control Mastery: Documented history implementing and mapping controls against NIST SP 800-53 and NIST SP 800-171 within federal or state government systems.
• High-Control Baselines: Direct experience preparing systems for or operating within FedRAMP High or comparable high-control, highly regulated environments.
• Infrastructure Toolkit: Proven hands-on mastery of Azure and Entra ID security parameters, managed identities, automated secrets/key management, and Azure Key Vault configuration.
• Threat Management: Strong background executing vulnerability management lifecycles, structured incident response mapping, and formal configuration assessments.
• Supply Chain Architecture: Practical understanding of third-party risk assessment methodologies and familiarization with Software Bill of Materials (SBOM) compilation frameworks.
• Testing & Assessment: Verifiable history acting as a security control assessor or leading technical control validation assessments.
• Vetting & Location: Must be a U.S.-based citizen or resident. Must be able to successfully clear an FDLE Level II background screening (including fingerprinting) within 5 business days of contract award.

• Prior experience navigating Florida state government compliance frameworks, specifically referencing Florida Administrative Code Rule 60GG-2 and Section 282.318, Florida Statutes.
• Practical security engineering context handling CJIS or HIPAA regulated government data streams.
• Hands-on security containment and control configuration for Azure Databricks workspaces, Azure Data Lake Storage Gen2 (ADLS Gen2), and Power BI workspaces inside Azure Government environments.
• Proven experience compiling, submitting, or auditing formal FedRAMP authority to operate (ATO) authorization packages.
• Active premium industry credentials such as CISSP, CISM, or CCSP.

1. The Government Customer: Explicitly name the agency and the high-control environment context (e.g., Federal Agency, Military Branch, State Department).
2. The Specific Compliance Baseline: Detail exactly how you applied security standards, naming the specific NIST families, FedRAMP control layers, or state statutory rules you personally mapped.
3. Architecture Scale & Complexity: Specify the exact size of the cloud network architecture, the number of distinct user roles or environments secure-mapped, and the precise project duration.
4. Personal Engineering Contribution: Detail exactly what you personally built, assessed, or documented (e.g., "Authored the System Security Plan for a FedRAMP High environment," "Configured least-privilege Entra ID access policies for database storage").
5. Deployment & Vetting Status: Explicitly state the true production, operational, or steady-state authorization status achieved by platforms under your security oversight.
6. Quantifiable Results: Include the precise metrics achieved under your guidance, such as percentage of vulnerabilities remediated, independent audit pass rates, or system availability uptime markers.

“We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status”

Texting Privacy Policy

• Message type: Informational; you will receive text messages regarding your application and potentially regarding interview scheduling.
• No mobile information will be shared with third parties/affiliates for marketing/promotional purposes.
• Message frequency will vary depending on the application process.Msg & data rates may apply.
• OPT out at any time by texting "Stop".