
Fechado
Publicado
Pago na entrega
I already run an Azure App Service, an Azure Database for PostgreSQL, Wasabi object storage and Azure Key Vault. My immediate focus is Authentication and Authorization, and I want it done right from day one. Here’s what I need: • Integrate Azure AD so that all three user groups—internal employees, external partners and customers—can sign in through both OAuth2 and OpenID Connect flows. • Apply fine-grained RBAC across App Service, PostgreSQL and the Wasabi storage gateway, leaning on Managed Identities to eliminate embedded credentials. • Store all secrets, keys and connection strings exclusively in Key Vault and wire them back into the workloads with reference syntax. • Enforce full network isolation: land every resource inside its own VNet, expose only private endpoints, and tighten traffic with NSGs. • Produce an audit-ready environment that maps clearly to SOC 2 controls, including policy definitions, activity logging and evidence collection procedures. Deliverables will include the configuration (ARM/Bicep/Terraform templates or scripts if you prefer), a concise hand-off document and a short walkthrough call so I can keep everything compliant going forward. If this sounds like your wheelhouse, let’s talk timelines and get started.
ID do Projeto: 40184696
33 propostas
Projeto remoto
Ativo há 1 dia
Defina seu orçamento e seu prazo
Seja pago pelo seu trabalho
Descreva sua proposta
É grátis para se inscrever e fazer ofertas em trabalhos
33 freelancers estão ofertando em média $231 AUD for esse trabalho

As a seasoned Network, Cybersecurity, and System Engineer with over a decade of professional experience, I believe I'm your ideal choice for securing your Azure platform with Azure AD. My expertise runs the gamut of your requirements from network administration, wireless connectivity, Virtualization to security solutions like Cisco ASA and Fortinet, all skills that would be of immense value in building a robust and secure Azure environment. With my extensive background in Azure infrastructure and usage of services such as App Service, Database for PostgreSQL and Key Vault, I possess thorough understanding of how these workloads operate and how to apply nuanced security measures to fortify them against potential threats. Moreover, I will implement fine-grained RBAC across your entire architecture using Managed Identities which eliminates embedded credentials. Lastly, my commitment to following best practices coupled with my proficiency in producing detailed documentation will ensure that your environment is not only set up finely but can be flawlessly managed going forward. I am readily available to start immediately and would love to deliver a network design that goes above and beyond your expectations while adhering perfectly to SOC 2 controls for audit readiness. Let's initiate a conversation around timelines so we can commence this project today!
$200 AUD em 3 dias
6,8
6,8

Hi there, I understand your priority to implement a robust and secure authentication and authorization system on your existing Azure platform. With my expertise in Azure AD integration and cloud security, I will ensure your environment supports OAuth2 and OpenID Connect for internal employees, external partners, and customers flawlessly. - Implement Azure AD with fine-grained RBAC across App Service, PostgreSQL, and Wasabi object storage using Managed Identities - Enforce full network isolation using VNets, private endpoints, and NSGs for enhanced security - Centralize all secrets and keys in Azure Key Vault with secure reference injection - Provide ARM/Bicep/Terraform templates, comprehensive hand-off documentation, and a walkthrough call to ensure SOC 2 compliant operations **Skills:** ✅ Azure AD Integration & RBAC Implementation ✅ Azure Key Vault & Managed Identities ✅ Network Security with VNets, NSGs, Private Endpoints ✅ Infrastructure as Code: ARM, Bicep, Terraform ✅ Audit & Compliance Mapping (SOC 2) **Certificates:** ✅ Microsoft® Certified: MCSA | MCSE | MCT ✅ cPanel® & WHM Certified CWSA-2 I am ready to start immediately and deliver a secure, compliant Azure environment within your timeline. What is your ideal timeline for completing the Azure AD integration and compliance setup? Best regards,
$250 AUD em 7 dias
6,4
6,4

Hello there, I can help you design and implement a secure, enterprise-grade authentication and authorization setup on Azure from day one. I’ll integrate Azure AD with OAuth2 and OpenID Connect for internal users, partners, and customers, implement fine-grained RBAC using Managed Identities, and ensure all secrets are stored and referenced securely via Azure Key Vault. I’ll also enforce full network isolation using VNets, private endpoints, and NSGs, and align the environment with SOC 2 audit requirements (logging, policies, evidence mapping). I’m Azure-certified (AZ-400, AZ-104, AZ-103) and experienced with Terraform/Bicep, App Service, PostgreSQL, and secure cloud architectures. I’ll deliver templates, documentation, and a walkthrough so you can maintain compliance confidently. Links of my Azure projects. https://www.freelancer.com/projects/cloud-networking/Azure-Migration-for-Secure-Web/reviews https://www.freelancer.com/projects/azure/Azure-API-Development-for-Apps/reviews https://www.freelancer.com/projects/microsoft-azure/Comprehensive-Kiosk-Revamp https://www.freelancer.com/projects/azure/Azure-API-Builder-net-Developer/reviews https://www.freelancer.com/projects/graphic-design/KIOSK-for-Childcare-Centres/reviews https://www.freelancer.com/projects/dot-net/Update-Map-Control-Azure-Maps/details Thanks.
$140 AUD em 7 dias
5,9
5,9

Hi, I can design and implement a secure Azure landing zone for your App Service, PostgreSQL, Wasabi gateway and Key Vault with Azure AD at the core, ensuring clean separation of auth, network and secrets from day one. I will: configure multi-tenant Azure AD auth (employees, partners, customers) using OAuth2/OIDC, define fine-grained RBAC and Managed Identities for each workload, move all credentials into Key Vault with reference-based integration, and place every resource into VNets with private endpoints and NSGs only. I will also align policies, logging and evidence collection to SOC 2 and deliver Terraform templates, a handover runbook and a walkthrough call. What is your current Azure AD tenant setup and do you foresee separate apps for each user group or a unified multi-tenant app with role-based segregation? I would be glad to partner with you to build a robust, audit-ready Azure platform that you can confidently scale while staying compliant long-term. Regards Sahanaj
$1.200 AUD em 15 dias
4,8
4,8

Hello, I’m excited about the opportunity to contribute to your Azure security foundation and get authentication, authorization, and network isolation done correctly from day one. With deep experience in Azure identity, RBAC, private networking, and compliance-ready deployments, I can integrate Azure AD sign-in for employees, partners, and customers using OAuth2/OIDC, then enforce fine-grained access across App Service, PostgreSQL, and your Wasabi gateway using Managed Identities to remove embedded credentials entirely. I’ll wire all secrets through Key Vault with reference syntax, lock everything behind VNets and private endpoints with tight NSGs, and deliver an audit-ready setup aligned to SOC 2 expectations with clear logging, policy definitions, and evidence collection procedures. You can expect clean IaC (Terraform or Bicep), a concise handoff guide, and a walkthrough so your team can maintain and extend the compliant posture confidently. Best regards, Juan
$140 AUD em 3 dias
4,6
4,6

I'm experienced in Azure platform security and Azure AD integration. I can help you set up fine-grained RBAC, manage secrets in Key Vault, and ensure network isolation for your resources. I will deliver configuration templates, a hand-off document, and provide a walkthrough call for compliance. Let's discuss timelines and kickstart this project.
$250 AUD em 7 dias
4,1
4,1

Hello, I will design and implement a secure, audit-ready authentication and authorisation architecture on Azure using Azure AD, OAuth2, OpenID Connect for your employees, partners and customers. I will enforce fine-grained RBAC across App Service, PostgreSQL, Wasabi using Managed Identities, remove all hard-coded credentials, centralise every secret, key and connection string in Azure Key Vault with proper reference wiring. I will isolate all resources inside VNets, expose only private endpoints, lock traffic using NSGs, configure logging, policies, controls so the environment clearly maps to SOC 2 requirements. You will receive clean IaC (Bicep/ARM/Terraform), a concise handover document, a walk-through call to keep everything compliant long-term. 1. Which identity flow do you want for customers and partners Azure AD B2C or a unified Azure AD tenant with external identities? 2. Do you already have SOC 2 policies defined or should I align the setup with standard SOC 2 control templates? Looking forward to discussing further. Best regards, Kamran
$160 AUD em 9 dias
2,7
2,7

Hello, I’m an experienced Azure architect and can implement a secure, audit-ready authentication and authorization setup across your App Service, PostgreSQL, Wasabi storage, and Key Vault environment. Approach: Integrate Azure AD for all user groups (internal, partners, customers) with OAuth2 and OpenID Connect flows. Apply fine-grained RBAC using Managed Identities, eliminating embedded credentials, across App Service, PostgreSQL, and Wasabi. Store all secrets, keys, and connection strings in Azure Key Vault, referenced directly in workloads. Enforce network isolation with VNets, private endpoints, and NSGs for secure traffic. Build an audit-ready environment aligned to SOC 2: policy definitions, activity logging, and evidence collection. Deliverables: Configuration scripts/templates (ARM, Bicep, or Terraform) Concise hand-off document Short walkthrough call for compliance maintenance I focus on secure, maintainable, and compliant Azure environments and can deliver a production-ready setup that meets your requirements from day one. Best regards,
$140 AUD em 7 dias
1,0
1,0

Hello, I can help you set up authentication and authorization correctly from day one using Azure best practices. I’ll integrate Azure AD so employees, partners, and customers can sign in using OAuth2 / OpenID Connect, and apply proper RBAC across your App Service, PostgreSQL, and Wasabi storage using Managed Identities—no hard-coded credentials. All secrets and connection strings will live in Azure Key Vault, and I’ll wire everything back securely. I’ll also lock the environment down with VNets, private endpoints, and NSGs, so only approved traffic is allowed. If this matches what you’re looking for, we can align on timeline and get started. Best regards, Rahul
$140 AUD em 7 dias
1,2
1,2

Hello, How are you? I have checked your job description and I’m confident I can complete exactly what you need. My extensive experience with Azure AD integrations, cloud security, and DevOps means I can ensure secure Azure platform setups that align with your project requirements. I have successfully implemented OAuth2 and OpenID Connect flows for diverse user groups, fine-grained RBAC, and leveraged Managed Identities to improve security by eliminating embedded credentials. Rest assured, all secrets and keys will be securely managed in Azure Key Vault, and I will enforce strict network isolation with proper NSGs and VNets to comply with SOC 2 controls. I believe this job is an ideal match with my skills and experience. Please send me a message so that we can discuss more. Thanks
$155 AUD em 1 dia
0,0
0,0

Hello Zahid P., I checked your project, and it looks interesting. This is something we already work on, so the requirements are clear from the start. We mainly work on Cloud Computing, Azure, Amazon Web Services, Windows Server, Cloud Security, DevOps, Data Protection, Terraform We focus on making things simple, reliable, and actually useful in real life not overcomplicated stuff. Let’s connect in chat and see if we’re a good fit for this. Best Regards, Ali nawaz
$129 AUD em 4 dias
0,0
0,0

Hi there, You're looking to secure Azure services with day-one authentication, fine-grained RBAC, network isolation, and SOC 2 audit readiness—this is exactly my wheelhouse. I’ve led Azure AD integrations for multi-identity scenarios (employees, partners, customers) with OAuth2 and OpenID Connect, and implemented RBAC across App Service, Azure Database for PostgreSQL, and gateway components, all using Managed Identities and Key Vault references to eliminate credentials. Plan: design Azure AD authentication and authorization for three user groups; implement granular RBAC leveraging Managed Identities; wire secrets and connection strings to Key Vault using reference syntax; place resources in dedicated VNets with private endpoints and NSGs; map SOC 2 control domains to policies, enable comprehensive activity logging, and establish evidence collection procedures. Deliverables: ARM/Bicep/Terraform templates (your tooling choice), a concise hand-off document, and a 60-minute walkthrough to review governance and runbooks. I can tailor naming conventions and tenant details after we confirm scope. Timeline: production-ready configuration and docs delivered within 7 days of kickoff. Budget: AUD 190. If this sounds right, we can lock in a start date and I’ll prepare a detailed plan. Best regards,
$155 AUD em 4 dias
0,0
0,0

Hi, We went through your project description and it seems like our team is a great fit for this job. We are an expert team which have many years of experience on Cloud Computing, Azure, Amazon Web Services, Windows Server, Cloud Security, DevOps, Data Protection, Terraform Please come over chat and discuss your requirement in a detailed way. Regards
$250 AUD em 7 dias
0,0
0,0

You already run Azure App Service, Azure Database for PostgreSQL, Wasabi object storage, and Key Vault, and you want Authentication and Authorization done right from day one. Success is internal employees, external partners, and customers signing in via OAuth2 and OpenID Connect, using Managed Identities with Key Vault only secrets, all behind private endpoints, with a clean SOC 2 control and evidence trail. First I will review your current tenant and App Service auth setup, then map RBAC to app routes and data, and validate Managed Identity access to PostgreSQL and the Wasabi storage gateway under private networking. For customers, do they sign in with Microsoft accounts, or do you need Entra External ID or B2C? Also, how is the Wasabi storage gateway deployed and reached from the VNet, and does it support identity based auth or only S3 keys? Main pitfalls are customer auth choice, PostgreSQL Entra auth wiring, private endpoint DNS, Key Vault reference resolution, NSG rules blocking platform traffic, and logging retention gaps for evidence. I have shipped this exact kind of baseline: App Service OpenID Connect, Managed Identities to PostgreSQL, Key Vault references, private endpoints, plus policy and activity logging aligned to SOC 2. I can start today and get the first working secure baseline in place fast, then iterate to audit ready. Danylo Podolskyi
$140 AUD em 7 dias
0,0
0,0

With over 7 years' experience as a Full-Stack Developer, one of my core competencies is creating secure and scalable cloud-based applications. I have an expertise in managing and optimizing backend architectures in various cloud platforms including Amazon Web Services (AWS) and Azure, the very platform you are currently operating on. Drawing from my experience, I am well-versed with Azure Active Directory and all the important facets that come with it - OAuth2, OpenID Connect flows and fine-grained RBAC, which are critical for managing user groups efficiently. I have also successfully implemented Managed Identities to secure workloads eliminating embedded credentials. Furthermore, having worked on projects necessitating equivalent standards of SOC 2 compliance control mapping, policy definitions, and activity logging corroborate my ability to set up an audit-ready environment aligned with your requirements. My hands-on knowledge of ARM/Bicep/Terraform templates further adds leverage to produce comprehensive deliverables for you; this would be inclusive of detailed configuration, a comprehensive hand-off document, and, if needed, a short walkthrough call to ensure ease at your end going forward. Let's collaborate to create a secure Azure platform!
$200 AUD em 7 dias
0,0
0,0

⭐⭐⭐⭐⭐ Hello, I have carefully analyzed your project requirements for securing your Azure environment with proper Authentication and Authorization. I recently implemented enterprise-grade RBAC and Azure AD integration across App Services, PostgreSQL, and object storage, leveraging Managed Identities and Key Vault for secret management. Key aspects of your project are clear. I will integrate Azure AD to support internal employees, external partners, and customers via OAuth2/OpenID Connect. RBAC will be applied across App Service, PostgreSQL, and Wasabi storage using Managed Identities, eliminating embedded credentials. All secrets, keys, and connection strings will reside in Key Vault and be referenced securely. Network isolation will be enforced using VNets, private endpoints, and NSGs, and logging/audit trails will align with SOC 2 requirements. Deliverables will include ARM/Bicep/Terraform templates, a concise hand-off guide, and a walkthrough call to ensure long-term compliance. I am available to begin immediately and committed to delivering a secure, audit-ready Azure environment following best practices. Best regards, Benjamin
$140 AUD em 7 dias
0,0
0,0

I appreciate the opportunity to work on your part-time electronics product testing project. I understand the importance of providing well-structured, professional, and user-friendly evaluations based on everyday usage, which will help refine future product runs and listings. I may be new to Freelancer, but I bring solid experience to the table in product testing and customer feedback analysis. I am comfortable with online purchasing and have an active Amazon account. I’m happy to offer a free call to discuss the project and ensure seamless collaboration if you would like. Regards, Blaze Nicholas
$30 AUD em 14 dias
0,0
0,0

Hello , I hope this message finds you well. I’m Dragan, a developer with extensive experience in [relevant field]. I believe I am well-suited for your project as it aligns perfectly with my expertise. I’ve reviewed the project requirements and am confident I can deliver within the specified timeframe. Based on the complexity, I estimate a timeline of [X weeks/days] and a budget of [Y amount]. I would recommend using [Program Language/Tools], as it’s the best approach for this type of project. I’ve worked on similar projects before, which you can view in my portfolio [link]. I wish you great success with this project and look forward to the possibility of collaborating. Best regards, Dragan
$250 AUD em 7 dias
0,0
0,0

Dear Client, Good morning . I hope this proposal finds you well. This is to inform you that I have KEENLY gone through your project description, CLEARLY understood all the project requirements as instructed in your project proposal and this is to let you know that I will perfectly deliver as desired. Being in possession of all stated required skills, (Windows Server, Cloud Computing, Cloud Security, Terraform, Amazon Web Services, Data Protection, Azure and DevOps), as this is my field of professional specialization having completed all certifications and developed adequate experience in the respective field, I hereby humbly request you to consider my bid for professional, quality and affordable services that meet all your requirements. I always guarantee timely delivery and unlimited revisions where necessary hence you are assured of utmost satisfaction when working with me. Please send me a message so that we can discuss more and seal the project. WELCOME.
$250 AUD em 1 dia
0,0
0,0

Hi, there, I’m an experienced Azure developer ready to implement robust Authentication and Authorization for your setup. I will integrate Azure AD for OAuth2 and OpenID Connect, apply fine-grained RBAC using Managed Identities, and ensure all secrets are securely stored in Key Vault. I will enforce network isolation with private endpoints and NSGs, producing a SOC 2 compliant environment. Deliverables include detailed configuration templates, a hand-off document, and a walkthrough call. Let’s discuss timelines and get started!
$200 AUD em 2 dias
0,0
0,0

North Parramatta, Australia
Método de pagamento verificado
Membro desde set. 2, 2023
$250-750 AUD
$2-6 AUD / hora
$250-750 AUD
$40-50 AUD
$2-8 USD / hora
$25-50 AUD / hora
$10-50 USD
$25-50 USD / hora
£18-36 GBP / hora
$15-25 USD / hora
₹750-1250 INR / hora
$30-250 USD
£20-250 GBP
£20-250 GBP
€8-30 EUR
₹12500-37500 INR
₹37500-75000 INR
₹37500-75000 INR
$60 USD
$15-25 USD / hora
$250-750 USD
mín. $50 USD / hora
$10-20 USD / hora
$500-1000 USD