Security Platform Engineer

ATC is seeking a Security Platform Engineer to serve as a fractional security and platform hardening resource for Azure, Databricks, Fivetran, and Unity Catalog environments. The role focuses on defining, implementing, and validating security patterns to support enterprise-scale data platform adoption, ensuring the platform is secure, governed, and aligned with enterprise security expectations.

Responsibilities:

• Identify security gaps, hardening opportunities, secure networking patterns, audit and monitoring procedures, access review processes, support procedures, and documentation needed for platform controls and audit evidence

Requirements:

• 5+ years of cloud platform, security engineering, infrastructure, or data platform experience
• Hands-on experience with Azure security patterns, including Entra ID, Key Vault, managed identities, service principals, RBAC, private networking, and logging
• Experience securing enterprise data platforms, ideally including Databricks, Unity Catalog, Azure Data Factory, Fivetran, or similar tools
• Experience designing group-based access models and permissioning structures across environments
• Experience with secrets management, credential rotation, service account governance, and privileged access controls
• Experience working with enterprise security teams, infrastructure teams, IAM teams, and audit/compliance stakeholders
• Ability to document security patterns and translate enterprise security requirements into practical implementation steps
• Experience with Unity Catalog security, including metastores, catalogs, schemas, external locations, storage credentials, grants, lineage, and audit logs
• Experience with SailPoint, CyberArk, or comparable IAM / PAM platforms
• Experience supporting audit requirements, access reviews, evidence collection, and platform control validation
• Experience with Databricks networking and workspace security configuration
• Experience with Fivetran security, destination configuration, connector permissions, service accounts, and credential management
• Experience operating in regulated or security-sensitive environments such as financial services, insurance, healthcare, or public companies