Azure Cloud Security Architect

Location: Taguig City, Philippines Work Setup: Hybrid (1x onsite per week) Shift: US Eastern Time (9:00 PM - 6:00 AM Philippine Time) (Night Shift) Employment Type: 3-Month Contract with Potential for Permanent Conversion About the Role We are looking for a Cloud Security Architect to join its Enterprise Architecture team. This role will focus on designing and securing cloud platforms, applications, and data across Azure environments while ensuring alignment with security standards, Zero Trust principles, and industry frameworks. Key Responsibilities Design and review secure cloud architectures across Azure IaaS, PaaS, and SaaS environments. Develop cloud security standards, architecture patterns, and implementation guardrails. Apply Zero Trust principles across cloud services and platforms. Drive security initiatives covering identity management, data protection, and workload security. Provide guidance on Cloud Security Posture Management (CSPM) and Cloud Workload Protection Platforms (CWPP). Ensure compliance with organizational security standards and risk management requirements. Partner with engineering, platform, and security teams to support secure cloud adoption. Qualifications Required 5-8 years of experience in Cloud Security Architecture, Secure Cloud Design , or related security roles. Strong expertise in Microsoft Azure and cloud security concepts, including Azure IaaS and PaaS security , identity and access management, network security controls, and secrets management. Experience with Cloud Security Posture Management (CSPM) , Cloud Workload Protection Platforms (CWPP) , Microsoft Purview, Data Loss Prevention (DLP) , and Information Protection solutions. Strong understanding of identity-centric security, least-privilege access, defense-in-depth, segmentation, secure service-to-service communication, and protection of data in transit and at rest. Experience with data classification, labeling, workload hardening, and cloud security governance. Proven experience designing cloud solutions with data protection and attack resistance as key architectural requirements. Familiarity with security frameworks and standards such as CSA Cloud Controls Matrix (CCM), NIST Cybersecurity Framework, and NIST SP 800 Series. Working knowledge of Zero Trust architecture principles and their application in cloud and SaaS environments. Strong communication and stakeholder management skills with the ability to influence both technical and non-technical audiences. Ability to work independently, engage stakeholders proactively, and drive security-related decisions. Preferred Experience with Microsoft Purview Information Protection and Data Governance. Exposure to AWS security concepts and services. Experience supporting audit readiness, risk assessments, and compliance initiatives. Experience working in regulated or risk-sensitive environments. Relevant certifications such as: Microsoft Azure Security Engineer (AZ-500) Microsoft Azure Solutions Architect Certified Cloud Security Professional (CCSP) Other cloud security certifications