Cloud Security Specialist – Azure & Databricks
About the assignment
A leading Dutch organisation has completed deployment of a new data platform built on Azure, Databricks, dbt, and Terraform. It holds the organisation's most critical data. The data team wants an independent security review before handover: a fresh perspective on configuration to validate what's secure and identify improvement areas.
You deliver that second opinion. This is a focused 50–100 hour engagement with direct impact on a modern, business-critical platform.
Your responsibilities
- Review Azure network architecture: VNets, Private Endpoints, Private Link, NSGs, Azure Firewall, Storage and Key Vault configuration
- Audit Databricks setup: VNet injection, Secure Cluster Connectivity, Unity Catalog, cluster policies, secret scopes and IP access lists
- Assess identity and access: Entra ID, service principals, managed identities, RBAC and PIM
- Review Terraform code for security misconfigurations and drift using tools like Checkov or tfsec
- Evaluate credential and connection handling in dbt and other platform components
- Benchmark configuration against CIS Azure Foundations, Microsoft Cloud Security Benchmark and Defender for Cloud
- Deliver a clear findings report with risk level, priority and remediation advice, presented to the data team
Tech Stack & Tools
Platforms & Tooling
Frameworks & Standards
Cloud & Infrastructure
Methodologies
Certifications (preferred)
Must-haves
- Hands-on experience securing Azure infrastructure: networking, Private Endpoints, Key Vault, Storage hardening
- Proven experience securing Databricks on Azure, including Unity Catalog and network isolation
- Strong knowledge of Entra ID, RBAC and non-human identity management
- Experience reviewing Terraform code from a security perspective
- Track record conducting security reviews or audits against CIS or MCSB benchmarks
- Ability to report clearly and prioritise findings for both engineers and management
Nice-to-haves
- Experience building security baselines and guardrails using Azure Policy
- Knowledge of dbt
- Experience with Defender for Cloud or other CSPM solutions
What we offer
- Focused, high-impact engagement (50–100 hours) on a mission-critical platform
- Work with a modern tech stack on a newly launched data infrastructure
- Direct collaboration with senior data leadership and short decision cycles
- Flexible engagement start and contract terms aligned with your experience
- Personal guidance from a dedicated MVPeople consultant who knows your niche
The process
Introduction
Phone call with your MVPeople consultant (within 24 hours)
Match & Brief
We discuss the assignment in detail and prepare you
Client meeting
Introduction to the client
Start
Contracting and onboarding
Details
Type
Freelance / ZZP (MVPeople)
Location
Den Haag, ZH
Work model
Hybrid
Level
Senior
Industry
overige
Market indication
€105 - €140 per hour
Posted
27 October 2026
Job ID
59388
Contact
MVPeople Group
jobs@mvpeoplegroup.com