Job Title: Snowflake Infra Architect
Must : Azure Private Link & VNet. Configure private endpoints and DNS so Snowflake traffic stays off the public internet.
Must : Entra ID SSO & SCIM. Wire up SAML/OAuth auth and automate user provisioning via SCIM from Azure AD.
Must : Terraform modules. Own Snowflake + AzureRM provider modules with remote state in Azure Blob and storage-lease locking.
Must : CI/CD for infra. Build Azure DevOps or GitHub Actions pipelines with PR-gated Terraform plan/apply across environments.
Must : Key Vault & secrets rotation. Store and auto-rotate Snowflake credentials in Azure Key Vault; inject into pipelines securely.
Must : ADLS Gen2 & external stages. Configure storage integrations, managed identity access, and Snowflake external stage permissions.
Must : NSG & firewall rules. Manage network security groups and Snowflake network policies for least-privilege ingress/egress.
Good to have : Observability via Azure Monitor. Stream Snowflake audit logs and metrics to Log Analytics via Event Hub; build alerts and dashboards.
Good to have :ADF & Event Hub ingestion. Support and troubleshoot Azure Data Factory pipelines and Event Hub consumers landing data into Snowflake.
Good to have :Policy-as-code . Enforce tagging, naming, and cost controls via Sentinel/OPA policies embedded in the Terraform pipeline.