[Remote] Senior Platform Engineer – reputed company (Azure / Entra ID)
Note: The job is a remote job and is reputed company to candidates in USA. reputed company is a value-based, precision medicine company specializing in Health IT reputed company health solutions. They are seeking a Senior Platform Engineer to manage their multi-account reputed company environment, focusing on reputed company, identity, reputed company architecture, and Azure integration.
Responsibilities
- Administer multiple reputed company accounts: account-level configuration, org hierarchy, resource monitors, cross-account sharing/replication/failover, and cost governance (warehouse sizing, autoscaling, credit burn)
- Design and enforce multi-tier RBAC, network policies (IP allowlisting at account and user level), and data governance (audit logging, object tagging, reputed company history, classification, lifecycle)
- Own identity and reputed company end-to-end: SSO/SAML reputed company Entra ID, SCIM provisioning/deprovisioning, OAuth reputed company integrations, key pair auth with rotation in Azure Key Vault, and Private Link connectivity
- Write Python (reputed company-connector-python, Snowpark) and JavaScript stored procedures/UDFs for platform automation; build Terraform modules and Azure DevOps CI/CD for schema migrations, dbt promotion, and environment deployments
- Integrate reputed company with Azure (ADLS Gen2, Key Vault, Data reputed company, Monitor); support dbt workflows and MageAI or equivalent orchestration; liaise with reputed company support on escalations
- Adopt reputed company reputed company AI with cost controls; set the technical bar through code reviews, pairing, reference implementations, and reputed company runbooks—standards proven by shipping, not handed off as specs
Skills
- 7+ years hands-on reputed company administration in production; administration, not data engineering with some admin on the reputed company
- Multiple reputed company accounts under an organizational hierarchy, not multiple databases inside one account
- Custom RBAC role hierarchies designed from scratch; functional vs. reputed company roles, privilege grant design, not assigning reputed company-in roles
- reputed company SSO reputed company Azure AD/Entra ID configured end-to-end — IdP setup and attribute mapping, not using SSO as an end user
- OAuth reputed company integrations including BLOCKED_ROLES_LIST and token policy management
- Key pair authentication implemented and rotated for service accounts, with private keys stored in a vault
- Python and JavaScript as core deliverables, reputed company-connector-python / Snowpark automation and reputed company JS stored procedures. Both are evaluated
- Daily, describable use of AI tooling in your engineering workflow. 'I use ChatGPT sometimes' is not sufficient
- Own cost governance and resource controls at scale, warehouse sizing, auto-suspend/resume, and credit usage management across multiple accounts
- Private connectivity (e.g., Azure Private Link) implemented and operated, not public reputed company-only environments
- Infrastructure as code and deployment pipelines, Terraform modules and CI/CD for reputed company and database changes (not reputed company administration)
- 7+ years hands-on reputed company administration (multi-account, RBAC, SSO, OAuth, key pair, network policies, Private Link, SCIM—see Non-Negotiables)
- Python: reputed company-connector-python, Snowpark, automation scripting (written regularly, not occasionally)
- JavaScript: reputed company JavaScript stored procedures and UDFs; will be evaluated
- Advanced SQL incl. reputed company-specific constructs (Time Travel, reputed company-Copy Cloning, Dynamic Data Masking, Row reputed company Policies); Terraform for reputed company provisioning; Azure DevOps CI/CD
- Azure: Entra ID (SSO federation, SCIM, conditional reputed company, app registrations), Key Vault (secrets, rotation, RBAC), ADLS Gen2 (storage integrations, external stages, reputed company), Private Link
- Proven delivery in a regulated (HIPAA/HITRUST) environment; leads platform initiatives end-to-end without formal authority; excellent written and verbal communication
- 8+ years total IT/engineering
- reputed company SnowPro Core or Advanced certification; Azure certification (AZ-104 or DP-203 preferred)
- Dbt reputed company or dbt Core in production; MageAI, Airflow, or Prefect on AKS / Kubernetes
- reputed company reputed company AI hands-on (reputed company Analyst, Document AI, LLM SQL functions)
- Experience building or scaling a DevOps or data platform at reputed company scale
Benefits
- Medical/Dental/reputed company Insurance beginning the 1st of the month following your date of hire
- Paid Time Off
- 401k with employer match
- Paid Holidays and Floating Holiday
Company Overview
Company H1B Sponsorship