Azure and Fabric Security Architect
Parasnath SinghUnited StatesSENIORPosted 1h ago
AzureFabricZTAZero Trust ArchitectureTableauPower BISnowflakeEntra IDConditional AccessMFAMicrosoft PurviewDefender for CloudCSPM
About the Role
We are looking for an Azure and Fabric Security Architect with expertise in Zero Trust Architecture (ZTA) to join a contract engagement in the USA. This role involves migrating Tableau reports to Power BI/Fabric while ensuring compliance with Zero Trust requirements and client governance processes.
Key Responsibilities
• Confirm the Zero Trust control baseline, required evidence per control, and the client owner for each control domain
• Implement Identity & access controls including Entra ID group structures, conditional access, MFA, and device/session controls for Fabric and Power BI
• Establish Data protection measures using Microsoft Purview sensitivity labeling and information protection
• Configure Tenant hardening through Fabric tenant settings, sharing/export controls, and external access restrictions
• Set up Auditability with audit logging, activity monitoring, and retention configuration
• Run Microsoft Defender for Cloud security posture assessment with attack path analysis
• Execute control validation and prepare change documentation for Architecture Review Board (ARB) and Change Advisory Board (CAB)
Requirements
• 15+ years of experience in Azure security architecture, specifically in regulated financial services (banking, credit unions, or similar)
• Expertise in Entra ID conditional access, PIM/JIT, service identities, and workload identity security
• Experience with Microsoft Purview information protection and sensitivity labels applied to Power BI/Fabric
• Knowledge of Power BI/Fabric tenant security settings
• Experience with Defender for Cloud CSPM and producing control evidence for auditors or regulators
Strongly Preferred
• Familiarity with NCUA/FFIEC regulations
• Experience with Snowflake security integration
• SC-100, AZ-500, or SC-300 certifications