Summary
✨ AI‑Generated
An architecture role focused on designing secure cloud environments, defining governance models, and supporting enterprise-scale infrastructure transformation.
Highlights
Long-term hybrid contract role focused on cloud architecture, security standards, governance, and enterprise infrastructure design.
Description
Please Contact: To discuss this amazing opportunity, reach out to our Talent Acquisition Specialist Srushti Mane at email address srush.mane@generistek.com can be reached on # (630) 576-1930.
We have Contract role MS + Azure Architect-Hybrid for client at Dallas, TX.
Please let me know if you or any of your friends would be interested in this position.
Position Details:
MS + Azure Architect-Hybrid- Dallas, TX
Location : Dallas, TX-75254 (Hybrid)
Project Duration : 15 months (Contract to Hire)
Pay Rate : $65 - $70 an hour on W2
Job Description:
Joint workshops with Cloud/Infra to define security guardrails feeding the landing zone design: identity model, network segmentation principles, logging/retention requirements, encryption standards, tagging and policy strategy.Review Management Group hierarchy, subscription structure, custom RBAC role definitions, PIM eligible/active role design, and break-glass account setup proposed by Cloud/Infra for each tenant.Validate hub-spoke topology, NSG/ASG rule sets, firewall placement, private endpoint usage, DDoS protection plan, and DNS architecture against security baseline.Review and validate Azure Policy initiatives (deny public IP, enforce encryption at rest/in transit, allowed resource types/regions, mandatory tagging) assigned at each Management Group/subscription scope.Validate the central Log Analytics workspace design, diagnostic settings scope (which resource types forward logs), retention periods, and confirm the workspace is correctly positioned for Sentinel onboarding.Review Key Vault architecture (per-subscription vaults, RBAC vs.
access policies, soft-delete/purge protection, private endpoint access) proposed for each landing zone.Score each subscription tier (Prod/Non-Prod/Identity/Connectivity) against Azure Security Benchmark / CIS controls; issue formal security sign-off or a remediation list back to Cloud/Infra before tool deployment begins.
Mandatory Skills:
MS + Azure ArchitectAzure Cloud Security ArchitectInfrastructure
To discuss this amazing opportunity, reach out to our Talent Acquisition Specialist Srushti Mane at email address srush.mane@generistek.com can be reached on # (630) 576-1930.
