Job ID: JOB_ID_223
Position Summary
We are looking for a Senior Security Architect to lead end-to-end security remediation efforts across a complex Azure ecosystem for a major enterprise client in Dallas, TX. This is a high-impact role requiring a blend of deep technical expertise in cloud security and the executive presence to lead client-facing discussions. You will be responsible for securing infrastructure, applications, and data platforms while driving the client’s overall security maturity.
Core Responsibilities
- Lead vulnerability remediation across Azure VMs, AKS clusters, App Services, and Function Apps.
- Architect and implement security controls for Azure Networking, including NSGs, WAF, and Private Endpoints.
- Manage identity and access using Entra ID (Azure AD), RBAC, and Managed Identities.
- Utilize Wiz (CSPM/CNAPP) to identify, prioritize, and remediate cloud security risks.
- Develop comprehensive hardening guides for Windows and Linux operating systems within the Azure environment.
- Review SAST/DAST results and guide engineering teams in fixing code-related vulnerabilities and secrets management.
- Drive large-scale backlog remediation by defining workflows in ServiceNow and ensuring weekly progress.
- Host daily client calls to communicate status, address blockers, and provide architectural guidance to senior stakeholders.
- Mentor DevOps and SRE teams on implementing security best practices within CI/CD pipelines.
- Document long-term improvement plans and compliance alignment strategies.
Technical Expertise and Tools
The ideal candidate possesses over 12 years of experience in security architecture. You must have hands-on experience with Azure Policy and Defender for Cloud to enforce governance at scale. Knowledge of Infrastructure as Code (IaC) hardening using Bicep or Terraform is essential for modernizing the client’s security posture. You will be expected to navigate complex hybrid environments, ensuring that workload isolation and network security are maintained across all layers. Familiarity with container security tools like Aqua or Prisma, and GitHub Advanced Security, will be highly beneficial in this role. The architect must be able to translate complex technical risks into actionable remediation plans that align with industry standards such as CIS benchmarks or NIST frameworks.
Strategic Impact
This is not just a technical role; it is a leadership position. You will act as the senior advisor for all security remediation streams, identifying architectural gaps and proposing long-term fixes rather than temporary patches. Your ability to influence client leadership and guide engineering teams will be the key to success. By uplifting the client’s security hygiene, you will directly contribute to the resilience of their global operations.
Special Requirements
Full-time onsite in Dallas, TX; Periodic travel required; Requires expertise in Wiz (CSPM/CNAPP) and Azure Security.
Compensation & Location
Salary: $185,000 – $255,000 per year (Estimated)
Location: Dallas, TX
Recruiter / Company – Contact Information
Recruiter / Employer: Vestaf
Email: vignesh@vestaf.com
Recruiter Notice:
To remove this job posting, please send an email from
vignesh@vestaf.com with the subject:
DELETE_JOB_ID_223