Senior Cloud Security Expert for AWS & Snowflake

SUMMARY: Client requires a AWS Snowflake Security Expert to lead and execute a NIST SP 800-53 Rev 5 moderate-baseline cybersecurity assessment of a multi-account Snowflake data-warehouse deployment on AWS, producing a security assessment report with findings and recommendations.

PRIMARY DUTIES:

• Planning Scoping
• Facilitate scoping workshop and interviews with theIAM Lead, Cloud Security Engineering, Site Reliability Engineering, Snowflake DBA Team, Network Security Engineering, IT GRC, Security Engineering, Security Architecture, Internal Audit, Security Operations, Vulnerability Management, Application Security, Red Team and Threat Hunting
• Select applicable NIST control baseline and overlays (HIPAA, CJIS, PCI-DSS, FedRAMP Moderate).
• Create detailed assessment plan schedule
• Execute the Security Assessment
• Identity Access
• Inventory AWS IAM roles, SCPs, KMS key policies, IAM Identity Center mappings.
• Map to Snowflake RBAC objects (users, roles, warehouses, resource monitors) and test separation-of-duties matrix.
• Validate MFA, Private link DNS, key-rotation cadence, IdP claims.
• Encryption Data Protection
• Inspect column-level encryption keys, tri-secret strategy, dynamic data-masking policies, secure data-sharing agreements, and customer-managed KMS versus Snowflake-managed keys.
• Logging Monitoring
• Ensure CloudTrail org-trail + S3 object-lock is present; validate Snowflake Access History Account Usage retention ≥ 1 year.
• Gather custom metrics in CloudWatch and Snowflake Resource Monitor alerts.
• Test log integrity (KMS-MAC signatures) and SIEM onboarding (Splunk, Sentinel, or Elastic).
• Network Segmentation
• Review VPC design, Transit Gateway attachments, Security Groups, NACLs, Guard Duty, and Private Link endpoint policies.
• Obtain TLS version scan against *.snowflakecomputing.com endpoints.
• Vulnerability Configuration
• Execute vulnerability reports reviews; run Inspector Qualys against EC2 bastions.
• Validate Snowflake parameter drift and golden-Terraform state alignment.
• Incident Response Contingency
• Verify runbooks for session kill, key rotation, and account failover scripts.
• Governance Supply-Chain
• Evaluate Snowflake FedRAMP package, SOC 2 Type II, AWS Artifact docs, partner-connect integrations, and data-processing addendums (DPAs) for GDPR/CCPA
• Identify third party governance for Snowflake and related vendors (e.g., API gateways, etc.) is in place

COMPENTENCY: Cloud Infrastructure Security Assessments (IaaS, PaaS and SaaS), IT Risk Management

REQUIRED EDUCATION: Bachelors in computer science, Information Systems, or equivalent; CISSP, CISA, or CISM preferred.

EXPERIENCE:

• 8+ years hands-on AWS security; hold current AWS Security Specialty or Solutions Architect Professional certification.
• 3+ years administering Snowflake Enterprise or higher (SnowPro Core or SnowPro Advanced: Architect experience strongly preferred).
• Deep knowledge of NIST SP 800-53 Rev 5 controls.
• Proficient with Terraform, CloudFormation, AWS Config conformance packs, and Okta/ADFS SAML claims mapping.
• Demonstrated experience integrating CloudTrail, GuardDuty, Macie, and Snowflake event tables into Splunk/Sentinel.
• Scripting: Python 3, Bash, SnowSQL; familiarity with Snowpark and data-classification UDFs a plus.
• AWS Control Tower Landing Zone experience.

LANGUAGE SKILLS: English

PHYSICAL DEMANDS: None

EXPECTED HOURS OF WORK: 40 per week – 9 weeks duration

TRAVEL: Fully Remote

QUALIFICATIONS:

• Experience with large enterprises
• Experience in the big tech industry
• Excellent attention to detail
• Strong organizational skills
• Excellent analytical skills
• Excellent documentation skills; demonstrated proficiency in Microsoft Office including Word, Excel and PowerPoint   
• Collaborative team worker – both in person and virtually using MS Teams or similar
• Ability to work as liaison between business and information security / information technology
• Flexibility to accommodate working across different time zones
• Excellent interpersonal communication skills with strong spoken and written English
• Business outcomes mindset
• Solid balance of strategic thinking with detail orientation
• Self-starter, ability to take initiative