Snowflake Infrastructure Architect

Cognizant; Blaine (MN); On-site; USD 140,000 - 200,000; Full time

Job summary

Cognizant is seeking a Snowflake Infrastructure Architect to secure and automate the Snowflake environment on Azure. You will handle private connectivity, authentication, and IaC workflows within the Cloud Infrastructure team, collaborating with security, data engineering, and DevOps groups.

You will own and improve Terraform modules, manage credentials in Key Vault, and implement secure pipelines across environments.

Qualifications

• 5+ years of experience with Snowflake.
• 5+ years of experience with SQL.
• 3+ years of experience with Azure.
• Experience configuring ADLS Gen2 storage integrations, managed identity access, and Snowflake external stage permissions.
• Experience managing network security groups and Snowflake network policies for least-privilege ingress/egress.

Responsibilities

• Configure Azure Private Link, VNets, private endpoints, and DNS so Snowflake traffic stays off the public internet.
• Wire up SAML/OAuth authentication and automate user provisioning via SCIM from Azure AD through Entra ID SSO.
• Own Terraform modules for Snowflake and AzureRM providers, with remote state in Azure Blob and storage-lease locking.
• Build Azure DevOps or GitHub Actions pipelines with PR-gated Terraform plan/apply across environments.
• Store and auto-rotate Snowflake credentials in Azure Key Vault, and inject secrets into pipelines securely.

Skills

Snowflake

SQL

Azure

Terraform

CI/CD pipelines (Azure DevOps/GitHub)

Tools

Terraform

Azure DevOps

GitHub Actions

AzureRM providers

Job description

Please note, this role is not able to offer visa transfer or sponsorship now or in the future.

Snowflake Infrastructure Architect

About the role

As a Snowflake Infrastructure Architect, you will make an impact by securing and automating the infrastructure that powers our Snowflake environment on Azure, from private network connectivity and identity to infrastructure-as-code and secrets management. You will be a valued member of the Cloud Infrastructure team and work collaboratively with security, data engineering, and DevOps stakeholders.

In this role, you will:

• Configure Azure Private Link, VNets, private endpoints, and DNS so Snowflake traffic stays off the public internet.
• Wire up SAML/OAuth authentication and automate user provisioning via SCIM from Azure AD through Entra ID SSO.
• Own Terraform modules for Snowflake and AzureRM providers, with remote state in Azure Blob and storage-lease locking.
• Build Azure DevOps or GitHub Actions pipelines with PR-gated Terraform plan/apply across environments.
• Store and auto-rotate Snowflake credentials in Azure Key Vault, and inject secrets into pipelines securely.

Work model

At Cognizant, we strive to provide flexibility wherever possible, and we are here to support a healthy work-life balance through our various wellbeing programs. Based on this role's business requirements, this is an onsite position requiring 5 days a week in a client or Cognizant office in Minneapolis, MN.

The working arrangements for this role are accurate as of the date of posting. This may change based on the project you're engaged in, as well as business and client requirements. Rest assured; we will always be clear about role expectations.

What you need to have to be considered

• 5+ years of experience with Snowflake
• 5+ years of experience with SQL
• 3+ years of experience with Azure
• Experience configuring ADLS Gen2 storage integrations, managed identity access, and Snowflake external stage permissions
• Experience managing network security groups and Snowflake network policies for least-privilege ingress/egress

These will help you stand out

• Experience streaming Snowflake audit logs and metrics to Log Analytics via Event Hub, including building alerts and dashboards in Azure Monitor
• Experience supporting and troubleshooting Azure Data Factory pipelines and Event Hub consumers landing data into Snowflake
• Background enforcing tagging, naming, and cost controls via Sentinel/OPA policy-as-code embedded in Terraform pipelines

We're excited to meet people who share our mission and can make an impact in a variety of ways. Think about your transferable experiences and unique skills that make you stand out as someone who can bring new and exciting things to this role.