Note: The job is a remote job and is open to candidates in USA. Integra Connect is a value-based precision medicine company working in health IT, real-world data, and digital health for specialty providers, payers, and life sciences. The Senior Platform Engineer will own and operate the multi-account Snowflake platform, including security, access architecture, administration, Azure integration, automation, governance, and incident response in a HIPAA-regulated environment.
Responsibilities
- Days 1-30: inherit the account inventory, RBAC model, resource monitors, and credential estate. Produce a written gap assessment of access risk and cost exposure
- Days 31-60: close the top three access findings yourself. Take ownership of the Terraform modules and the Azure DevOps pipelines for schema migration
- Days 61-90: own the credential rotation calendar, the network policy baseline, and the cost governance reporting line to engineering leadership
- Multi-account administration: account configuration, organizational hierarchy, resource monitors, replication and failover, cross-account data sharing
- Access architecture: multi-tier custom RBAC, grant hierarchies, functional versus access role separation, enforcement and drift detection across accounts
- Identity and credentials: SAML federation and SCIM through Entra ID, OAuth security integrations with BLOCKED_ROLES_LIST and token policy, key-pair auth with scheduled rotation into Azure Key Vault, user lifecycle including TYPE classification and service-account naming
- Network and connectivity: account and user level network policies, Private Link endpoints, coordination with network and security teams
- Cost governance: warehouse sizing, autoscaling policy, resource monitor alerting, credit burn analysis and reporting
- Python automation with snowflake-connector-python and Snowpark; Terraform modules for warehouses, databases, roles, and integrations
- Azure DevOps pipelines for schema migration, dbt promotion, and environment-to-environment deployment
- Azure integration: ADLS Gen2 storage integrations and external stages, Key Vault, Data Factory, Azure Monitor. Maintenance and migration of existing JavaScript stored procedures, with new work in Python and SQL
- Audit logging, object tagging, access history analysis, data classification, and lifecycle policy in a HIPAA-regulated environment
- Dbt workflow support, MageAI or equivalent orchestration operations, and Snowflake vendor escalation and release monitoring
- Daily use of AI tooling such as GitHub Copilot, Claude, or Cursor is expected rather than optional. Governed adoption of Snowflake Cortex AI with cost controls in place
- Set the bar through code review, pairing, runbooks, and architecture documentation. Own platform standards and drive adoption across data, analytics, and application engineering without formal authority
Skills
- 4+ years hands-on Snowflake administration in production; 8+ years total engineering experience
- Advanced SQL including Snowflake-specific constructs: Time Travel, zero-copy cloning, dynamic data masking, row access policies
- Production infrastructure-as-code experience
- CI/CD pipelines you have built and maintained for database or schema deployment
- Azure fundamentals in practice: Entra ID app registrations and conditional access, Key Vault secrets and rotation, ADLS Gen2 access patterns
- A platform-level initiative you've owned end to end, including vendor escalation and cross-team alignment
- Delivery in a regulated environment (HIPAA, HITRUST, SOX, PCI, FedRAMP, or similar) with compliance constraints on tooling and access
- Clear written and verbal communication
- This role calls for hands-on ownership, not adjacent experience
- Custom RBAC designed from scratch — a role hierarchy you built from a blank slate: functional roles versus access roles, grant hierarchy, object ownership model. Extending a hierarchy someone else designed, or assigning built-in roles, is a different kind of experience than this
- Key-pair auth you own end to end — implemented for service accounts and rotated on a defined schedule, with private keys held in a managed secrets vault
- OAuth security integrations — Snowflake OAuth, internal or external, including BLOCKED_ROLES_LIST and token policy
- Network policies at account and user level — Snowflake IP allowlists implemented and enforced at both levels, and you can explain how policy inheritance resolves
- SSO and SCIM configured, not just consumed — SAML federation and SCIM provisioning stood up end to end against an enterprise IdP. Entra ID, Okta, and Ping all count equally
- Production Python, weekly — snowflake-connector-python, Snowpark, or both, in real automation you maintain
- This role operates in a HIPAA-regulated environment. All candidates must be comfortable with compliance-driven constraints on tooling, access, and data handling
- This is a direct W-2 position
- Terraform with the Snowflake provider preferred; Terraform elsewhere, or equivalent IaC, welcome
- Azure DevOps preferred; GitLab CI or GitHub Actions welcome
Benefits
- Medical/Dental/Vision Insurance beginning the 1st of the month following your date of hire
- Paid Time Off
- 401k with employer match
- Paid Holidays and Floating Holiday
Company Overview
Company H1B Sponsorship