Azure Cloud Security & Databricks Consultant

Requirements:

• We require hands-on Azure security architecture experience across identity, network, compute, and data services.
• We require demonstrated leadership remediating critical and high-severity vulnerabilities identified through baselines and penetration tests.
• We require proficiency with Azure AD and Infrastructure as Code security scanning and governance.
• We require experience deploying and operating CSPM solutions; CrowdStrike CSPM is preferred.
• We require a background in SaaS and data security, using tools such as Cyera or equivalents.
• We require Azure Databricks security, networking, and IAM governance experience, including Unity Catalog.
• We require knowledge of TLS inspection exceptions, risk documentation, and approval workflows.
• We require familiarity with GSOC or SIEM log ingestion and retention practices.
• We require an understanding of Azure Firewall egress patterns and private endpoint architectures.
• Applicants must be willing and able to work on a W-2 basis.

Responsibilities:

• Finalize Azure architecture security reviews and coordinate remediation of critical and high-severity vulnerabilities across Azure, on-premises datacenters, and Active Directory environments transitioning to Veolia.
• Run static security scans on Azure AD Infrastructure as Code repositories and track remediation.
• Coordinate remediation of critical and high-severity Azure penetration test findings and verify their closure.
• Implement CrowdStrike CSPM, test security posture, remediate critical findings, and retest after remediation.
• Integrate Falcon Shield for the Azure Jump Domain and verify protection coverage.
• Scan data repositories with Cyera, coordinate data-volume tier expansions for migration pipelines, and remediate exposure findings.
• Lead Azure Databricks security and governance, including approving TLS inspection exceptions with documented risks, compensating controls, and ServiceNow sign-off.
• Validate private-by-design Databricks configurations, including VNet injection, Secure Cluster Connectivity without public IPs, private endpoints, and private DNS.
• Coordinate GSOC log ingestion and retention policies, including interim blob storage retention before full GSOC integration.
• Oversee Entra ID and IAM access governance for Databricks workspaces, Unity Catalog, service principals, and managed identities.
• Ensure approved external integrations use centralized egress routing through Azure Firewall.

Technologies:

• AI
• Active Directory
• Azure
• Cloud
• Databricks
• Firewall
• IAM
• Network
• Security
• ServiceNow
• Unity
• ASP.NET
• GameDev
• Support

More

We are seeking a security-focused Azure and Databricks specialist for cloud migration and hardening work connected to a transition services agreement. The role is remote, with King of Prussia, Pennsylvania, or Milwaukee, Wisconsin, preferred, and involves coordination across legacy and target environments, thorough documentation, and validation of compensating controls. The W-2 hourly rate is $90–$100. Eligible W-2 employees regularly scheduled for at least 30 hours per week may receive medical, dental, vision, 401(k) with company match, life and disability insurance, pre-tax accounts, other voluntary benefits, and sick time where required by law. We are Eliassen Group, a strategic consulting firm providing technology, business advisory, and life sciences solutions. For nearly 40 years, we have brought together people, domain expertise, and intelligent capabilities to help clients achieve meaningful outcomes. We are committed to an inclusive workplace and make employment decisions based on merit, performance, and business needs. Our initial application screening and hiring process may use AI tools, with AI-assisted evaluations and responses reviewed by human recruiters.

last updated 43 week of 2026