Azure Cloud Security & Databricks Consultant
Core
Azure security architect leading cloud migration hardening, vulnerability remediation, and governance for Azure, on-prem datacenters, and Active Directory environments.
Role type
Senior IC Azure Cloud Security & Databricks Consultant
Builds
Secure Azure architecture, remediated vulnerabilities, CSPM policies, Databricks governance configurations, and integrated security logging.
Domain
Cloud Security, Data Security, Identity & Access Management (IAM)
Required skills
Azure security architecture, vulnerability remediation, Azure AD security, Infrastructure as Code security scanning, CrowdStrike CSPM, Cyera data security, Azure Databricks security, Unity Catalog, TLS inspection, GSOC/SIEM log ingestion, Azure Firewall egress, private endpoint architecture
Preferred skills
SaaS security background, Unity Catalog governance, ServiceNow integration
Technologies
Azure, Databricks, CrowdStrike, Cyera, ServiceNow, Entra ID, Unity Catalog, Azure Firewall, GSOC, SIEM
Responsibilities
Finalize Azure architecture security reviews and coordinate remediation of critical/high-severity vulnerabilities across Azure, on-prem datacenters, and Active Directory. Run static security scans on Azure AD Infrastructure as Code repositories and track remediation. Coordinate remediation of Azure penetration test findings and verify closure. Implement CrowdStrike CSPM, test security posture, remediate findings, and retest. Integrate Falcon Shield for Azure Jump Domain and verify protection coverage. Scan data repositories with Cyera, coordinate data-volume tier expansions, and remediate exposure findings. Lead Azure Databricks security and governance, including approving TLS inspection exceptions with documented risks and ServiceNow sign-off. Validate private-by-design Databricks configurations (VNet injection, Secure Cluster Connectivity, private endpoints, private DNS). Coordinate GSOC log ingestion and retention policies. Oversee Entra ID and IAM access governance for Databricks workspaces, Unity Catalog, service principals, and managed identities. Ensure approved external integrations use centralized egress routing through Azure Firewall.
Seniority
Senior, hands-on IC