Cloud Security Architect

Candidates requiring visa sponsorship now or in the future are not eligible to apply for this opportunity. C2C or 1099 not available for this opportunity! Potential candidates will need to have the ability to work W2 on OpenKyber's payroll. OpenKyber is helping our client add an Azure Cloud Information Security Engineer. Preference given to candidates that can be onsite in Marietta, Georgia (or Alpharetta Georgia), Greenwood Village, Colorado, Omaha, Nebraska or Berkeley Heights, New Jersey but REMOTE is possible. This role is responsible for designing, implementing, and managing Microsoft Sentinel and Azure security solutions to detect, investigate, and respond to cyber threats while ensuring compliance with government security requirements.

Ideal candidates will have a strong background in Microsoft Sentinel, Azure security technologies, and government cloud environments, with the ability to enhance security operations through advanced detection, automation, and compliance-driven security practices.

• Design, implement, and maintain Microsoft Sentinel SIEM/SOAR solutions.
• Ingest and manage security data sources into Azure Log Analytics (Syslog, CEF, APIs, Threat Intelligence feeds).
• Develop and tune KQL queries, analytics rules, alerts, and dashboards.
• Build automated response playbooks using Azure Logic Apps and Microsoft Copilot for Security.
• Perform threat hunting, incident investigation, and response activities with SOC teams.
• Implement and manage Azure security controls aligned with Zero Trust principles.
• Assess vulnerabilities, analyze attacker TTPs, and support remediation efforts.
• Support cloud security governance, compliance, and audit activities, including FedRAMP and FISMA requirements.
• Provide security architecture guidance and contribute to cloud security strategy initiatives.

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field.
• 5+ years of cybersecurity experience, including 5+ years of hands-on Microsoft Sentinel administration and engineering.
• Strong experience with: Microsoft Sentinel, Azure Log Analytics, Kusto Query Language (KQL), Azure Logic Apps, Microsoft Defender Suite, Azure Security and Identity Services, Privileged Access Management (PAM), CI/CD security and application security scanning.
• Experience configuring and securing enterprise Azure environments.
• Knowledge of Zero Trust architecture and cloud security best-practices.

• Azure Government (GovCloud) experience.
• Experience supporting FISMA, FedRAMP, and NIST compliance frameworks.
• Relevant certifications such as: CISSP, CCSP, Microsoft Azure Security Engineer Associate, Microsoft Cybersecurity Architect Expert.
• Experience collaborating with government clients, auditors, and executive stakeholders.

• Microsoft Defender XDR: Defender for Endpoint, Office 365, Identity, and Cloud Apps;
• Data Protection: Microsoft Purview, MIP, DLP, Key Vault
• Identity & Access Management: Entra ID (Azure AD), PIM, Conditional Access, Azure Lighthouse, Zero Trust
• Cloud Security: Azure Security Services, M365 Security, Multi-Cloud IAM

Anticipated hourly rate while on contract is in the $79-88/hr range.

For applications and inquiries,