Security and Compliance Engineer

Key Responsibilities:

·         Design and implement least-privilege AWS IAM, SSO, SCIM, service-principal, and privileged-access controls.

·         Configure Databricks Unity Catalog security, including RBAC/ABAC, data masking, row filters, and access governance.

·         Implement AWS security controls using KMS, Secrets Manager, CloudTrail, AWS Config, GuardDuty, and Security Hub.

·         Ensure compliance with HIPAA, PHI protection requirements, NIST-aligned controls, and enterprise security policies.

·         Lead security assessments, risk remediation, access reviews, audit evidence collection, and CISO reporting.

·         Develop security architecture documents, control matrices, test evidence, and operational runbooks.

Required Skills:

·         10+ years of cybersecurity or cloud security experience, including 3+ years securing Databricks or similar lakehouse platforms.

·         Mandatory healthcare security and HIPAA compliance experience.

·         Strong expertise in AWS security services, IAM, Databricks Unity Catalog, and data governance.

·         Experience with audit readiness, risk management, security monitoring, and compliance documentation.