Senior Data Platform Engineer

Ahold Delhaize USA, a division of global food retailer Ahold Delhaize, is part of the U.S. family of brands, which also includes five leading omnichannel grocery brands – Food Lion, Giant Food, The GIANT Company, Hannaford and Stop & Shop. Ahold Delhaize USA associates support the brands with a wide range of services, including Finance, Legal, Sustainability, Commercial, Digital and E-commerce, Technology and more.

The Software Engineer III (Senior Data Platform Engineer) is responsible for designing, engineering, automating, securing, and supporting enterprise data platforms built on Microsoft Azure and Azure Databricks. The engineer will drive platform modernization, security, reliability, automation, observability, and cost optimization across Azure and Databricks environments. The position requires strong technical leadership and collaboration with Data Engineering, Cloud Operations, Architecture, Cybersecurity, and other technology teams to deliver scalable, secure and highly available platforms.

Our flexible/hybrid work schedule includes 3 in-person days at our Salisbury, NC office and 2 remote days.

Applicants must be currently authorized to work in the United States on a full-time basis.

• Design, deploy, configure, and support Azure infrastructure and data-platform services, including Azure Databricks, Azure Data Factory (ADF), Azure Data Lake Storage Gen2 (ADLS), Azure Key Vault, managed identities and related Azure services.
• Engineer and troubleshoot Azure networking, including VNets, subnets, NSGs, Private Link/private endpoints, DNS, routing, firewalls, Network Security Perimeters (NSP), and secure connectivity between Databricks, storage, applications and enterprise networks.
• Administer and deploy Azure Databricks environments, including workspace configuration, compute, serverless capabilities, Unity Catalog, storage integration, identity and access management, workspace security, policies and platform troubleshooting.
• Develop reusable Infrastructure as Code (IaC) using Terraform and/or Azure Bicep to automate provisioning and configuration of Azure infrastructure, Databricks work spaces, networking, storage, security controls and supporting platform services.
• Implement Dev Sec Ops  and CI/CD practices using Git Hub, Git Hub Actions and/or Azure Dev Ops, including automated infrastructure deployment, configuration management, testing, security controls and environment promotion.
• Implement and maintain security and governance controls across Azure and Databricks, including Microsoft Entra , RBAC, managed identities, service principals, OAuth, Azure Key Vault, Unity Catalog, secrets management, access controls and audit logging.
• Support Databricks/ Unity Catalog capabilities including metastore, catalogs, schemas, workspace bindings, external locations, storage credentials, permissions, and secure access patterns while partnering with data-domain owners responsible for data products and data-access groups.
• Establish monitoring and observability across Azure and Databricks using Azure Monitor, Log Analytics, Databricks system tables and audit logs, Datadog and related technologies, with proactive alerting and operational dashboards.
• Drive platform reliability through incident management, root-cause analysis, vulnerability remediation, patching/upgrades, capacity management, high availability, BCDR, performance optimization and automation of operational activities.
  
  Identify and implement Fin Ops and cost-optimization opportunities across Azure and Databricks, including infrastructure utilization, compute sizing, serverless workloads, storage lifecycle management, stale-resource remediation, tagging and cost attribution.
• Provide technical leadership…