Job Title: Azure Cloud Administration Specialist
Job Type: Full-Time, Contract (W2 Only, not available for C2C, C2H, or 1099, and no sponsorship)
Contract Length: September 1, 2026 – August 31, 2027
Schedule: Monday–Friday, Normal Business Hours, 35 hours/week
Work Model: Hybrid (3 days on-site, 2 days remote) at 1 Centre St, New York, NY 10007
Job Description
Paramint LLC is seeking a highly experienced Azure Cloud Administration Specialist (Specialist III) to support a major New York City government agency under the Department of Citywide Administrative Services (DCAS).
This role will lead the design, implementation, and operationalization of a secure, scalable, and production-ready Azure cloud environment across multiple environments (Development, QA, UAT, Staging, and Production). The selected candidate will play a critical role in ensuring alignment with the Azure Well-Architected Framework, supporting governance, security, performance optimization, and seamless hybrid integration.
The Azure Cloud Specialist will provide both architectural leadership and hands-on expertise across infrastructure design, cloud security, identity management, and DevSecOps practices.
Key ResponsibilitiesAzure Architecture & Design
- Design end-to-end Azure cloud architecture across all environments
- Define subscription models, resource groups, naming conventions, and tagging standards
- Develop secure network topology (VNets, subnets, NSGs)
- Produce architecture diagrams and documentation
- Ensure alignment with Azure Well-Architected Framework principles
Infrastructure Provisioning
- Provision and configure Azure resources (VMs, App Services, SQL, Storage, Key Vault)
- Implement governance controls including RBAC and Azure Policy
- Support Azure Kubernetes Service (AKS) environments
- Validate connectivity and infrastructure readiness across environments
Security Architecture
- Design and implement secure cloud architecture and Zero Trust principles
- Configure network security controls (NSGs, Firewalls, WAF, private endpoints)
- Conduct threat modeling, risk assessments, and security validation
- Ensure compliance with enterprise and regulatory security standards
Identity & Access Management (IAM)
- Configure and manage Azure Entra ID
- Implement RBAC, MFA, Conditional Access, and Privileged Identity Management (PIM)
- Manage Key Vault and secrets protection
- Support data protection, classification, and DLP initiatives
Governance, Risk & Compliance
- Implement Azure policies and enforce governance frameworks
- Ensure compliance with ISO 27001, NIST, and related standards
- Conduct audits, vulnerability assessments, and remediation tracking
DevSecOps & Documentation
- Integrate security into CI/CD pipelines (Azure DevOps / GitHub)
- Provide guidance to engineering teams on secure development practices
- Develop runbooks, architecture diagrams, and operational documentation
- Conduct knowledge transfer to internal teams
Required Qualifications (Mandatory)
Candidates who do not meet the mandatory qualifications will not be considered.
- Extensive experience designing and implementing enterprise Azure cloud architectures
- Strong knowledge of Azure Well-Architected Framework and cloud best practices
- Hands-on experience with Azure networking (VNets, subnets, NSGs, Firewall, WAF, private endpoints)
- Experience provisioning Azure infrastructure (VMs, App Services, Storage, SQL, Key Vault)
- Strong expertise in Identity and Access Management (Azure Entra ID, RBAC, MFA, Conditional Access, PIM)
- Solid understanding of Zero Trust security architecture
- Experience implementing Azure Policy, governance controls, and security baselines
- Knowledge of cloud security, threat modeling, and risk assessment
- Familiarity with compliance frameworks (ISO 27001, NIST, etc.)
- Experience with DevSecOps and CI/CD security integration
- Strong documentation and communication skills
- Ability to collaborate with technical and business stakeholders
Desirable Skills / Experience
- PowerShell and Azure CLI scripting
- Experience with GitHub Actions and Azure DevOps
- Azure cost management and optimization
- Azure certifications (Administrator Associate, Solutions Architect Expert)
Additional Requirements
- Ability to provide off-hours support during deployments or critical incidents
- Strong stakeholder communication and collaboration skills
- Experience working in government or highly regulated environments is a plus
Application Process
To be considered, please submit the following:
✔ Updated resume highlighting Azure cloud architecture and IAM experience
✔ Two professional references (name, title, organization, email, phone)
✔ Confirmation of W-2 contract eligibility
✔ Confirmation of ability to work in the required hybrid schedule
Pay: $55.00 - $65.00 per hour
Application Question(s):
- Are you willing to work under a W2 Contract? (This is NOT available for C2C, C2H or 1099, and NO sponsorship)
Location:
- New York, NY 10007 (Preferred)
Ability to Commute:
- New York, NY 10007 (Required)
Work Location: Hybrid remote in New York, NY 10007
