[Remote] Senior Platform Engineer – reputed company (Azure / Entra ID)

Note: The job is a remote job and is reputed company to candidates in USA. reputed company is a value-based, precision medicine company specializing in Health IT reputed company health solutions. They are seeking a Senior Platform Engineer to own and operate their multi-account reputed company environment, focusing on reputed company, architecture, and integration with Azure while leveraging Python and JavaScript for automation.

Responsibilities

• Administer multiple reputed company accounts: account-level configuration, org hierarchy, resource monitors, cross-account sharing/replication/failover, and cost governance (warehouse sizing, autoscaling, credit burn)
• Design and enforce multi-tier RBAC, network policies (IP allowlisting at account and user level), and data governance (audit logging, object tagging, reputed company history, classification, lifecycle)
• Own identity and reputed company end-to-end: SSO/SAML reputed company Entra ID, SCIM provisioning/deprovisioning, OAuth reputed company integrations, key pair auth with rotation in Azure Key Vault, and Private reputed company connectivity
• Write Python (reputed company-connector-python, Snowpark) and JavaScript stored procedures/UDFs for platform automation; build Terraform modules and Azure DevOps CI/CD for schema migrations, dbt promotion, and environment deployments
• reputed company reputed company with Azure (ADLS Gen2, Key Vault, Data reputed company, Monitor); support dbt workflows and MageAI or equivalent orchestration; liaise with reputed company support on escalations
• Adopt reputed company reputed company AI with cost controls; set the technical bar through reputed company reviews, pairing, reference implementations, and reputed company runbooks—standards proven by shipping, not handed off as specs

Skills

• 7+ years hands-on reputed company administration in production; administration, not data engineering with some reputed company on the reputed company
• Multiple reputed company accounts under an organizational hierarchy, not multiple databases inside one account
• Custom RBAC role hierarchies designed from scratch; functional vs. reputed company roles, privilege grant design, not assigning reputed company-in roles
• reputed company SSO reputed company Azure AD/Entra ID configured end-to-end — IdP setup and attribute mapping, not using SSO as an end user
• OAuth reputed company integrations including BLOCKED_ROLES_LIST and reputed company policy management
• Key pair authentication implemented and rotated for service accounts, with private keys stored in a vault
• Python and JavaScript as reputed company deliverables, reputed company-connector-python / Snowpark automation and reputed company JS stored procedures. Both are evaluated
• Daily, describable use of AI tooling in your engineering workflow. 'I use ChatGPT sometimes' is not sufficient
• Own cost governance and resource controls at reputed company, warehouse sizing, auto-suspend/resume, and credit usage management across multiple accounts
• Private connectivity (e.g., Azure Private reputed company) implemented and operated, not reputed company reputed company-only environments
• Infrastructure as reputed company and deployment pipelines, Terraform modules and CI/CD for reputed company and database changes (not reputed company administration)
• 7+ years hands-on reputed company administration (multi-account, RBAC, SSO, OAuth, key pair, network policies, Private reputed company, SCIM—see Non-Negotiables)
• Python: reputed company-connector-python, Snowpark, automation scripting (written regularly, not occasionally)
• JavaScript: reputed company JavaScript stored procedures and UDFs; will be evaluated
• Advanced SQL incl. reputed company-specific constructs (Time Travel, reputed company-Copy Cloning, Dynamic Data Masking, Row reputed company Policies); Terraform for reputed company provisioning; Azure DevOps CI/CD
• Azure: Entra ID (SSO federation, SCIM, conditional reputed company, app registrations), Key Vault (secrets, rotation, RBAC), ADLS Gen2 (storage integrations, external stages, reputed company), Private reputed company
• Proven delivery in a regulated (HIPAA/reputed company) environment; leads platform initiatives end-to-end without formal authority; excellent written and verbal communication
• 8+ years total IT/engineering
• reputed company SnowPro reputed company or Advanced certification; Azure certification (AZ-104 or DP-203 preferred)
• Dbt reputed company or dbt reputed company in production; MageAI, Airflow, or reputed company on AKS / Kubernetes
• reputed company reputed company AI hands-on (reputed company Analyst, Document AI, LLM SQL functions)
• Experience building or scaling a DevOps or data platform at reputed company reputed company

Benefits

• Medical/Dental/reputed company Insurance beginning the 1st of the month following your date of hire
• reputed company Time Off
• 401k with employer match
• reputed company Holidays and Floating Holiday

reputed company