Database Architect (Modern Authentication & Federation)

Flexible/remote | 6 month initial contract

We are seeking a Database Architect to design and deliver modern authentication and identity federation patterns for databases across multi-cloud and hybrid environments. The role focuses on replacing legacy account-based access with secure, federated models that work consistently across Azure, AWS, GCP, and on-premises.

Responsibilities

Implement authentication models using Microsoft Entra ID with OIDC/OAuth 2.0

Deliver app, service, and workload federation to SQL Server, Oracle, PostgreSQL, MySQL, Snowflake, and MongoDB

Design patterns for machine, container, and workload identities, not just human logins

Ensure identities remain valid across clouds during failover or migration

Migrate legacy DB accounts to federated, secretless authentication models

Apply Conditional Access, RBAC, least privilege, and audit-ready controls

Document federation patterns, runbooks, and integration guides

Provide guidance to DBAs, security, and engineering teams

Skills & Experience

Strong experience with Entra ID federation using OIDC/OAuth 2.0

Direct experience federating workloads and apps to cloud-hosted and on-prem DBs

Expertise in identity federation for Azure SQL, Synapse, Snowflake, RDS, and Cloud SQL

Track record of migrating from SAML/STS or local accounts to modern federation models

Understanding of compliance frameworks (ISO 27001, PCI DSS, Essential Eight)

Ability to design resilient, multi-cloud DB access solutions