Azure Security: Azure Security Architect/Engineer

Ampcus Inc. is a certified global provider of a broad range of Technology and Business consulting services. We are in search of a highly motivated candidate to join our talented Team.

Job Title: Azure Security: Azure Security Architect/Engineer

Location(s): Pittsburgh, PA, Lake Mary, FL, or New York , NY / Remote is an option

Role Overview
This role is responsible for driving the technical design and full lifecycle integration of comprehensive security control frameworks within cloud environments. The Cloud Security Architect applies deep expertise in foundational risk and compliance models such as NIST SP 800-53, NIST CSF, and ISO 27001 to translate regulatory requirements into scalable, secure, and resilient architectures.

The position emphasizes embedding security into infrastructure through zero-trust principles, automated enforcement, and well-defined authorization boundaries. The architect ensures continuous compliance with complex regulatory and third-party audit requirements by integrating controls directly into cloud platforms and DevSecOps pipelines.

Key Responsibilities

• Implement, operationalize, and enforce FedRAMP-aligned security controls across cloud platforms
• Perform gap assessments between existing implementations and required security frameworks; drive remediation efforts
• Design, deploy, and validate security policies, guardrails, and rule sets within cloud environments
• Collaborate with data protection and cryptography teams to ensure proper implementation of encryption and key management controls
• Ensure all security controls are auditable, measurable, and continuously monitored
• Identify and mitigate risks such as over-provisioning, excessive access, and misconfigurations from a governance perspective
• Work cross-functionally with engineering, DevOps, and compliance teams to drive controls into production environments

Control Translation Expertise
Proven ability to interpret complex regulatory requirements and translate them into actionable engineering solutions within AWS and DevSecOps ecosystems.

Boundary & Scoping Design
Expertise in defining authorization boundaries, designing secure enclaves, and implementing microsegmentation strategies to isolate sensitive or regulated workloads.

Compensating Controls
Strong experience designing, documenting, and defending compensating controls where direct technical enforcement is not feasible.

Hands-On Engineering Execution
Ability to actively build, implement, and operationalize security solutions-not limited to advisory or review functions.

Cross-Functional Collaboration
Proven ability to work with multiple teams and drive security controls from concept through production deployment.

Preferred Qualifications

• Experience in regulated environments (e.g., FedRAMP, healthcare, financial services)
• Strong background in AWS cloud security architecture and services
• Familiarity with zero-trust architectures and modern DevSecOps practices
• Experience with continuous compliance monitoring and audit readiness

Ampcus is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, protected veterans or individuals with disabilities.