Data Platform Security Architect - Information Security

Senior Data Platform Security Architect (12+ Years)

Location: Remote (USA)
Hours: 40 hrs/week

 About the Role

We are seeking a highly experienced Senior Data Platform Security Architect to lead the design, implementation, and governance of security across modern data platforms.

This role will act as the primary authority on data security architecture, working across engineering, data, compliance, and cybersecurity teams to ensure platforms are secure, scalable, and compliant.

 Key Responsibilities

• Architect end-to-end data platform security frameworks across:
  • Data Lakes, Data Warehouses, Streaming Pipelines, Analytics Platforms
  • Technologies: Snowflake, Databricks, Microsoft Fabric, Kafka, Spark
• Define and enforce:
  • Access Control, Encryption (at rest & in transit)
  • Data Masking, Tokenization, Secrets Management
• Lead:
  • Threat Modeling & Risk Assessments
  • Security remediation initiatives
• Design IAM strategies:
  • RBAC, ABAC, Least Privilege, Zero Trust
• Establish:
  • Data Classification & Security Tiering Models
• Embed security across lifecycle:
  • Ingestion → Transformation → Storage → Consumption → Archival
• Define security for multi-cloud:
  • AWS, Azure, Google Cloud Platform
• Implement:
  • Audit Logging, Monitoring, Lineage Tracking
  • Incident Detection, Forensics, Compliance Reporting
• Ensure compliance with:
  • GDPR, CCPA, SOC 2, SOX, USGCB, FCC
• Mentor teams and guide secure architecture decisions

 Required Qualifications

• 10+ years in Information Security
• 5+ years in Data Platform / Cloud Security Architecture

Core Expertise

• Data Platform Security (Lakes, Warehouses, Streaming)
• Multi-Cloud Security (AWS, Azure, Google Cloud Platform)
• IAM, RBAC, ABAC, Zero Trust
• Encryption, KMS/HSM
• Data Masking & Tokenization

Hands-on Experience

• Tools & Platforms:
  • Snowflake, Databricks, Microsoft Fabric
  • Kafka, Spark
• Security & Monitoring:
  • SIEM, DSPM, DLP, Vulnerability Scanners
• Programming:
  • Python, SQL, Bash

Compliance Knowledge

• GDPR, CCPA, PCI-DSS, SOC 2, SOX, NIST CSF

 Preferred Qualifications

• Certifications:
  • CISSP / CCSP / AWS Security Specialty / Google Professional Cloud Security Engineer
• Experience with:
  • Terraform / Pulumi (IaC)
  • DevSecOps Practices
  • Data Governance Tools: Collibra, Alation, Apache Atlas
• Domain Experience:
  • Financial Services / Telecommunications
• Knowledge of:
  • Privacy Enhancing Technologies (PETs)
    • Differential Privacy
    • Federated Learning

 Mandatory Skills (Must Have)

• Data Platform Security Architecture
• Cloud Data Security (AWS, Azure, Google Cloud Platform)
• IAM, RBAC, ABAC, Zero Trust
• Encryption, Masking, Tokenization, Secrets
• Snowflake, Databricks, Microsoft Fabric Security
• Compliance Frameworks (GDPR, CCPA, SOC2, SOX)
• Audit Logging, Monitoring, SIEM
• Streaming Security (Kafka, Spark)