Remote Azure Cloud Security & Databricks Consultant

Eliassen Group; Richmond (VA); Remote; USD 124,000 - 138,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401k with company match

Life insurance

Job summary

Eliassen Group is seeking a security-focused Azure and Databricks consultant to support cloud migration and hardening efforts under a transition services agreement. The engagement requires coordinating across legacy and target environments, rigorous documentation, and validation of compensating controls.

The role involves architecture reviews, vulnerability remediation, CSPM rollout, data protection, and governance for Azure Databricks, with US citizenship or legal residency required.

Qualifications

• Hands-on Azure security architecture across identity, network, compute, and data services.
• Remediation leadership for critical/high vulnerabilities from baseline/pentest outputs.
• Proficiency with Azure AD and IaC security scanning and governance.
• Experience deploying CSPM solutions, preferably CrowdStrike CSPM.
• Background in SaaS and data security, including Cyera or equivalents.
• Azure Databricks security, networking, and IAM governance including Unity Catalog.
• Knowledge of TLS inspection exceptions, risk documentation, and approvals workflows.
• Familiarity with GSOC or SIEM log ingestion/retention practices.
• Understanding of Azure Firewall egress patterns and private endpoint architectures.

Responsibilities

• Finalize Azure architecture security reviews and coordinate remediation of critical/high vulnerabilities across Azure, on‑prem and AD surfaces.
• Perform static security scans on Azure AD IaC repositories and track remediation.
• Coordinate remediation of critical/high findings from Azure pentest and verify closure.
• Implement CrowdStrike CSPM, execute posture testing, remediate findings, and retest post‑remediation.
• Integrate Falcon Shield for the Azure Jump Domain and validate protection coverage.
• Scan data repositories using Cyera, coordinate data volume tier expansions for migration pipelines, remediate exposure findings.
• Lead Azure Databricks security and governance, including TLS inspection exceptions with documented risk and ServiceNow sign‑off.
• Validate private‑by‑design patterns for Databricks (VNet injection, private endpoints, private DNS).
• Coordinate GSOC logging ingestion/retention policies, including interim blob storage retention before full GSOC integration.
• Oversee Entra ID and IAM access governance for Databricks workspaces, Unity Catalog, service principals, and managed identities.
• Ensure centralized egress routing via Azure Firewall for approved external integrations.

Skills

Azure security

Security architecture

Vulnerability remediation

IaC security scanning

CSPM

CrowdStrike CSPM

Azure Databricks

Unity Catalog

IAM governance

GSOC logs

Azure Firewall

TLS inspection

Tools

CrowdStrike CSPM

Cyera

Azure Databricks

Azure AD IaC scanning

Job description

Eliassen Group is seeking a security-focused Azure and Databricks consultant to support cloud migration and hardening efforts under a transition services agreement. The engagement requires coordinating across legacy and target environments, rigorous documentation, and validation of compensating controls.

The role involves architecture reviews, vulnerability remediation, CSPM rollout, data protection, and governance for Azure Databricks, with US citizenship or legal residency required.