Snowflake Security & Access Governance Architect

Job Title: Snowflake Security & Access Governance Architect

Location: Remote (Canada)

Job Type: Contract

Experience: 5+ years

Job Overview

 

Key Responsibilities

 

• Architect and maintain Snowflake's RBAC hierarchy, integrating SSO, MFA, and SCIM-driven user provisioning to enforce least-privilege principles across all schemas, warehouses, and data assets.
• Configure and monitor Snowflake Horizon security features including dynamic column-level masking, row-access policies, tag-based data classification, and customer-managed encryption keys (Tri-Secret Secure).
• Manage access to GenAI capabilities by configuring built-in roles and enforcing granular per-function permissions; restrict LLM access via model-level RBAC and account-level allowlists.
• Secure Snowflake network architecture by establishing Network Policies, implementing Private Link endpoints, and restricting egress traffic.
• Analyze Snowflake Access History and Account Usage metadata to audit AI query patterns, track Cortex AI agent interactions, and surface non-human identity access drift.

Required Skills

 

• Snowflake Security Architecture, RBAC, IAM
• SSO, MFA, SCIM, Identity Lifecycle Management
• Dynamic Data Masking, Row-Access Policies, Tag-Based Classification
• Customer-Managed Encryption Keys, Tri-Secret Secure
• Snowflake Horizon, Cortex AI Governance
• Network Policies, Private Link (AWS, Azure, or Google Cloud Platform)
• Security Auditing, Access History, Compliance

Preferred Skills

 

• Experience with Non-Human Identity (NHI) governance
• Familiarity with GenAI/LLM access controls in enterprise environments
• Cloud security experience across AWS, Azure, or Google Cloud Platform

Location & Work Model

 

Fully Remote — US or Canada

Engagement Details

 

Contract engagement. Immediate start preferred.