Data Security Architect

Key Responsibilities
Define the enterprise data security architecture, including data discovery and classification (DSPM integration), DLP/CASB control strategy (M365, Box, endpoint), data platform security controls (Snowflake, Databricks), and application/API data protection patterns (cloud-first)
Establish standard control patterns including data classification and tagging models, encryption, tokenization, and masking strategies, data access control models (RBAC, ABAC, RLS), and data movement and sharing controls
Ensure consistency and scalability of data protection across SaaS, cloud, and application environments
Design and drive integration across Snowflake and Alation (data catalog and ownership mapping), Entra ID (identity-driven access controls and policy enforcement), M365 and Box (data loss prevention and collaboration controls), and cloud environments (AWS, Azure, Google Cloud Platform)
Ensure alignment between DSPM findings, DLP policies, and data platform controls
Translate data risk insights into technical control implementation requirements
Develop and maintain a Data Security Reference Architecture
Define secure design patterns and implementation guidance for data engineering, application development, and cloud platform teams
Enable engineering teams to embed data protection into systems and workflows rather than relying solely on downstream tooling
Partner with the Data Security Program Lead, Data Security Engineering Lead, and Cyber Defense/SOC teams to provide architectural direction and design input
Ensure execution teams can implement effectively and controls remain aligned to risk priorities
Define and evolve data protection standards aligned to the Data Management Policy (classification, handling, retention) and regulatory requirements (HIPAA, GDPR, etc.)
Evaluate emerging capabilities and tools including DSPM platforms, DLP/CASB solutions, and data platform-native controls
Continuously improve architecture based on new data risks, platform evolution (Snowflake, AWS, etc.), and feedback from operations and engineering

Required Qualifications
8+ years of experience
Bachelors Degree
AWS Certified Solutions Architect
CISSP
CCSP

Skills
Snowflake Security
Databricks Security
Cloud Security Architecture
DSPM Tools
DLP/CASB Platforms
Entra ID
M365 Security
Box Security
Encryption, Tokenization, and Data Masking
Access Control Models (RBAC, ABAC, RLS)
Data Catalog and Governance Tools
AWS
Azure and Google Cloud Platform
Application/API Data Protection
Security Architecture
Data Protection Architecture
Data Classification and Tagging
Data Access Governance
Regulatory Compliance
Technical Documentation
Stakeholder Communication
Cross-functional Collaboration
Executive Presentations
Data Security Program Implementation

Schedule
Start date: 2026-10-16