Security Architect

• Experience with Microsoft Defender for Cloud, Azure Policy, Azure Resource Graph, and Log Analytics. \n

• Experience with Wiz or comparable CSPM/CNAPP platforms. \n

• Automation experience using PowerShell, Azure CLI, Python, or REST APIs., * Familiarity with Zero Trust, CIS Benchmarks, NIST CSF, and MITRE ATT&CK.

n \n

• Assess security posture across Azure subscriptions, resources, services, and network architectures. \n

• Identify cloud security risks, configuration gaps, exposures, and control failures; provide actionable remediation guidance. \n

• Evaluate network segmentation, routing, NSGs, firewalls, private endpoints, ingress/egress controls, VPN, and ExpressRoute. \n

• Develop and optimize Kusto Query Language (KQL) queries for security, compliance, exposure, exception, and remediation analysis. \n

• Translate security requirements into scalable technical controls, guardrails, and secure-by-default configurations. \n

• Partner with engineering, platform, security, and service teams on architecture reviews, risk assessments, and remediation. \n

\n

\n

YOUR SKILLS AND EXPERIENCE

\n

Required Skillset/Core Skill Priorities

\n \n

• Cloud Security: Azure security architecture, Azure resources, identity, RBAC, managed identities, network controls, storage security, encryption, and secure configuration. \n

• Network Security: TCP/IP, DNS, routing, segmentation, NSGs, Azure Firewall, WAF, Private Link/private endpoints, VPN, ExpressRoute, and inbound/outbound traffic controls. \n

• Kusto/KQL: Hands-on KQL using joins, summarize, extend, project, parse, mv-expand, unions, time-series analysis, query optimization, and troubleshooting. \n

• Azure Platform: Tenants, management groups, subscriptions, resource groups, ARM resource model, and Azure resource providers. \n

• Security Posture: CSPM, security controls, configuration assessment, exposure management, compliance, exceptions, and remediation. \n

• Security Controls: Ability to interpret security requirements and translate them into practical Azure technical controls and guardrails. \n

• Identity Security: Microsoft Entra ID, Azure RBAC, privileged access, workload identities, managed identities, and least privilege. \n

• Automation: PowerShell, Azure CLI, Python, REST APIs, or comparable scripting and automation technologies. \n

• Data Analysis: Ability to analyze large security datasets and convert technical findings into actionable insights and metrics. \n

• Communication: Ability to explain risks and remediation to engineering teams and summarize security posture for leadership. \n

\n

\n, n

We offer the opportunity to participate in health, dental, and vision insurance, along with a 401k.

\n

\n

Murphy & Associates has had the privilege of providing technology and business consulting services to over 150 diverse clients in the Greater Seattle Area since 1980. We take great pride in our full disclosure model and low margins which attracts top tier talent. We are transparent with our employees. Our business model fosters loyalty, satisfaction, and consistent delivery of quality services from the consultants on our team. Through it all, Murphy & Associates has stayed true to its roots, partnering with highly qualified technology and business consultants and working closely with our clients, fairly and ethically., Our client is a large technology company based in the Greater Seattle Area. They develop software, services, products, and hardware devices.