Infra Architect with Snowflake

Job title: Infra Architect with Snowflake Location:- Chicago/Atlanta/Minneapolis (first 2months should be present in Chicago) Must : Azure Private Link & VNet. Configure private endpoints and DNS so Snowflake traffic stays off the public internet .Must : Entra ID SSO & SCIM. Wire up SAML/OAuth auth and automate user provisioning via SCIM from Azure AD .Must : Terraform modules. Own Snowflake + AzureRM provider modules with remote state in Azure Blob and storage-lease locking .Must : CI/CD for infra. Build Azure DevOps or GitHub Actions pipelines with PR-gated Terraform plan/apply across environments .Must : Key Vault & secrets rotation. Store and auto-rotate Snowflake credentials in Azure Key Vault; inject into pipelines securely .Must : ADLS Gen2 & external stages. Configure storage integrations, managed identity access, and Snowflake external stage permissions .Must : NSG & firewall rules. Manage network security groups and Snowflake network policies for least-privilege ingress/egress . Good to have : Observability via Azure Monitor. Stream Snowflake audit logs and metrics to Log Analytics via Event Hub; build alerts and dashboard s.Good to have :ADF & Event Hub ingestion. Support and troubleshoot Azure Data Factory pipelines and Event Hub consumers landing data into Snowflak e.Good to have :Policy-as-code . Enforce tagging, naming, and cost controls via Sentinel/OPA policies embedded in the Terraform pipelin e.