Azure Cloud Security & Databricks Specialist - Remote

Eliassen Group; Bismarck (ND); Remote; USD 124,000 - 138,000; Full time

Benefits offered by this job

Medical, Dental, and Vision benefits

401k with company match

Life insurance

Job summary

Eliassen Group is seeking a security-focused Azure and Databricks consultant to support cloud migration and hardening activities for a transition services agreement. This remote role requires coordination across Azure, on‑prem, and Active Directory surfaces, with emphasis on architecture reviews, remediation, IaC security scanning, CSPM rollout, and governance for Azure Databricks.

Candidates must be a US citizen or legal resident and able to work on a W-2 basis.

Qualifications

• Hands-on Azure security architecture across identity, network, compute, and data services.
• Experience leading remediation for critical and high vulnerabilities from baseline and pen-test outputs.
• Proficiency with Azure AD and IaC security scanning and governance.
• Experience deploying CSPM solutions (prefer CrowdStrike CSPM).
• Background in SaaS and data security (Cyera or equivalents).
• Azure Databricks security, networking, and IAM governance including Unity Catalog.
• Knowledge of TLS inspection exceptions, risk documentation, and approvals workflows.
• Familiarity with GSOC or SIEM log ingestion and retention practices.
• Understanding of Azure Firewall egress patterns and private endpoint architectures.

Responsibilities

• Finalize Azure architecture security reviews and coordinate remediation of critical and high vulnerabilities across Azure, on‑premises datacenters, and Active Directory surfaces transitioning to Veolia.
• Perform static security scans on Azure AD Infrastructure as Code repositories and track remediation.
• Coordinate remediation of critical and high findings from Azure penetration testing and verify closure.
• Implement CrowdStrike CSPM, execute posture testing, remediate critical findings, and perform retesting post‑remediation.
• Integrate Falcon Shield for the Azure Jump Domain and validate protection coverage.
• Scan data repositories using Cyera, coordinate data volume tier expansions for migration pipelines, and remediate exposure findings.
• Lead Azure Databricks security and governance, including TLS inspection exception approval with documented risk, compensating controls, and ServiceNow sign‑off.
• Validate private‑by‑design patterns for Databricks, including VNet injection, Secure Cluster Connectivity without public IPs, private endpoints, and private DNS.
• Coordinate GSOC logging ingestion and retention policies, including interim blob storage retention prior to full GSOC integration.
• Oversee Entra ID and IAM access governance for Databricks workspaces, Unity Catalog, service principals, and managed identities.
• Ensure centralized egress routing via Azure Firewall for approved external integrations.

Job description

Eliassen Group is seeking a security-focused Azure and Databricks consultant to support cloud migration and hardening activities for a transition services agreement. This remote role requires coordination across Azure, on‑prem, and Active Directory surfaces, with emphasis on architecture reviews, remediation, IaC security scanning, CSPM rollout, and governance for Azure Databricks.

Candidates must be a US citizen or legal resident and able to work on a W-2 basis.