Senior Data Security Architect

Responsibilities

• Own and evolve enterprise data security architecture across Databricks, Azure Data Lake, and enterprise reporting platforms
• Design and enforce fine-grained data access controls (RBAC, ABAC, row/column-level security) using Unity Catalog and governed tagging frameworks
• Architect identity and access management (IAM) patterns integrating Okta, Microsoft Entra , SailPoint, and privileged access platforms
• Define and implement PHI/PII protection strategies, including tokenization, encryption, de-identification, and masking across environments
• Establish secure data sharing and multi-tenant access models for external customers, partners, and embedded analytics
• Lead architecture for data rights, entitlements, and consent-based access controls, ensuring compliance with contractual and regulatory requirements
• Build and operationalize security controls aligned to SOX ITGC, including logical access controls, change management, and audit evidence frameworks
• Design audit-ready security architectures supporting HIPAA, SOC 2 Type II, and FedRAMP compliance requirements
• Partner with engineering, SRE, and platform teams to embed security into CI/CD pipelines, platform onboarding, and development standards
• Define and govern data classification, tagging, and lineage-aware security policies across medallion architectures
• Evaluate and recommend enterprise security tooling and governance platforms
• Produce architecture artifacts (decision records, control matrices, audit evidence) consumable by internal and external auditors

• Bachelor’s degree in Computer Science, Information Systems, or a related field, or equivalent experience, and typically requires 7+ years of relevant experience in data security, cybersecurity, or data architecture, with significant focus in cloud‑based environments
• Proven experience implementing data security and governance controls in regulated environments (HIPAA, healthcare strongly preferred)
• Strong expertise in SOX IT General Controls (ITGC) domains, including logical access, change management, and audit controls
• Hands‑on experience with Databricks Unity Catalog security models, including RBAC, ABAC, and data masking
• Deep knowledge of Azure cloud security architecture, including networking, identity, and secrets management
• Experience designing identity and access management solutions (Okta, Entra , SailPoint, privileged access tools)
• Demonstrated experience implementing encryption, tokenization, and de-identification strategies for sensitive data
• Experience designing secure data architectures for external/customer‑facing analytics products
• Ability to translate regulatory requirements into implemented technical controls and audit artifacts
• Strong communication skills with ability to present architecture concepts to technical, business, and audit stakeholders.