Snowflake Infra Architect: Cloud Security & Automation
Listed on 2026-10-24
-
IT/Tech
Azure, Cloud Computing: Infrastructure & Operations, Data Engineering
Job Title:
Snowflake Infra Architect
Must :
Azure Private Link & VNet. Configure private endpoints and DNS so Snowflake traffic stays off the public internet.
Must :
Entra & SCIM. Wire up SAML/OAuth auth and automate user provisioning via SCIM from Azure AD.
Must :
Terraform modules. Own Snowflake + AzureRM provider modules with remote state in Azure Blob and storage-lease locking.
Must : CI/CD for infra. Build Azure Dev Ops or Git Hub Actions pipelines with PR-gated Terraform plan/apply across environments.
Must :
Key Vault & secrets rotation. Store and auto-rotate Snowflake credentials in Azure Key Vault; inject into pipelines securely.
Must : ADLS Gen2 & external stages. Configure storage integrations, managed identity access, and Snowflake external stage permissions.
Must : NSG & firewall rules. Manage network security groups and Snowflake network policies for least-privilege ingress/egress.
Good to have :
Observability via Azure Monitor. Stream Snowflake audit logs and metrics to Log Analytics via Event Hub; build alerts and dashboards.
Good to have :
ADF & Event Hub ingestion. Support and troubleshoot Azure Data Factory pipelines and Event Hub consumers landing data into Snowflake.
Good to have :
Policy-as-code . Enforce tagging, naming, and cost controls via Sentinel/OPA policies embedded in the Terraform pipeline.
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).