Senior Security Architect

Job Title: Senior Security Architect

Location: Dallas, TX (Hybrid)

Duration: Long term contract

Note: Interview-L1 Video , L2 Video, Final interview Brillio office in Coppell TX (In person)

Job Description:

• About the Role
  This role is meant for someone who can own security remediation end-to-end across a complex Azure ecosystem.

• You ll handle vulnerabilities across infrastructure, applications, AKS, containers, data platforms, and core Azure services.
• Expect to engage directly with senior client leaders, guide engineering teams, and shape the client s overall security maturity.

Key Responsibilities

• Lead vulnerability remediation across a wide set of Azure and hybrid platforms including:
• Azure VMs (Windows/Linux)
• AKS clusters, node pools, and container registries
• App Services, Function Apps, Logic Apps
• Storage Accounts, Databases, Key Vaults, Networking
• Container images (ACR) and CI/CD pipelines
• Review and guide fixes code-related vulnerabilities (SAST/DAST results, secrets, insecure dependencies).
• Build detailed hardening guides covering OS, Azure services, Kubernetes, networks, and identity layers.
• Work closely with infra, DevOps, SRE, and app teams to implement hardening recommendations in a structured, repeatable way.
• Drive large-scale backlog remediation prioritize issues, define workflows, and ensure real progress week over week.
• Provide industry-standard best practices to uplift the client s overall security maturity, including cloud posture management, workload isolation, network security, identity hygiene, and governance.
• Host daily client calls to walk through status, blockers, upcoming remediation tasks, and architectural considerations.
• Document architecture gaps, remediation approaches, compliance alignment, and long-term improvement plans.
• Act as senior advisor and escalation point for all security remediation streams.
• Coach and mentor teams executing remediation to ensure consistency and quality.

Required Skills & Experience

• 12 15+ years of combined experience in security architecture, cloud security, infrastructure security, or application security.
• Deep hands-on experience with Azure security across:
• Compute (VMs, VMSS)
• Containers (AKS, ACR)
• PaaS services (App Services, Function Apps, API Management)
• Identity & Access (Azure AD/Entra ID, Managed Identities, RBAC)
• Networking security (NSGs, ASGs, WAF, Private Endpoints, Firewall)
• Data security (Key Vault, Storage, SQL, CosmosDB)
• Defender for Cloud and Azure Policy
• Strong exposure to Windows and Linux hardening.
• Ability to drive remediation across infrastructure, application layers, and cloud-native services.
• Strong architectural understanding of how vulnerabilities originate, how they propagate across cloud resources, and how to design long-term fixes.
• Experience resolving complex remediation backlogs in enterprise-scale environments.
• Excellent communication skills and confidence to lead daily discussions with senior client stakeholders.
• Strong documentation skills ability to create clear hardening guides, runbooks, architectural diagrams, and remediation plans.

Tools Knowledge

• Wiz (CSPM/CNAPP)
• ServiceNow (ticketing, workflows, reporting)
• Azure Portal, Azure CLI, ARM/Bicep familiarity
• Linux (RHEL/Ubuntu) and Windows Server environments
• Optionally: Defender for Cloud, GitHub Advanced Security, Qualys, Aqua/Prisma, or equivalent.

Nice to Have

• Certifications: CISSP, CCSP, AZ-500, AZ-305, CKA/CKS.
• Experience with IaC hardening (Terraform/Bicep) and DevSecOps practices.
• Background in threat modeling, architecture risk reviews, or cloud governance.

Thanks & Regards

Saravanan

DMinds Solutions Inc.