Data Security Architect

Job Title: Data Security Architect

Location: Remote

Duration: 12 months

Primary Focus: Data Security Architecture, Data Loss Prevention (DLP), Data Security Posture Management (DSPM), Snowflake Security, and Data Governance

Clint is seeking an experienced Data Security Architect to help build and mature its enterprise data security program. This professional will define how sensitive data is classified, accessed, governed, and protected across complex enterprise environments, regardless of where the data resides.

This is an architecture-focused role rather than a tool administration position. The architect will translate business requirements and data-related risks into enterprise security standards, reference architectures, and reusable protection patterns that engineering teams can implement.

The ideal candidate will have a strong foundation in DLP and enterprise data protection, along with experience designing data security architecture, classification and governance standards, access-control models, and integrated security controls. The role will also contribute to clint's emerging DSPM capabilities and initial data security architecture service blueprint.

• Design and develop enterprise data security architecture, standards, and reference models across complex data environments.

• Develop an initial data security architecture service blueprint to guide the enterprise data security program.

• Define reusable data protection patterns and security standards that engineering teams can implement.

• Establish data classification, tagging, cataloging, and governance approaches for sensitive enterprise data.

• Define data access-control models and determine appropriate controls based on data sensitivity and business risk.

• Evaluate and define the appropriate use of encryption, masking, tokenization, and other data protection mechanisms.

• Design Snowflake security and data governance integrations.

• Integrate identity, data, platform, and cloud security controls into a cohesive enterprise architecture.

• Define how DLP, DSPM, CASB, data governance, and identity controls should work together.

• Partner with engineering teams, application teams, business users, vendors, and technical stakeholders to translate architecture into implementation.

• Provide technical guidance and architectural direction to DLP engineers, vendors, and internal implementation teams.

• Communicate security risks, architectural decisions, and recommended controls in business-friendly terms.

• Influence stakeholders and drive adoption of data security standards across engineering and business teams.

• Demonstrated experience designing enterprise data security architecture across complex data environments.

• Strong foundation in Data Loss Prevention (DLP) and enterprise data protection, with experience progressing from hands-on technical work into architecture and design.

• Experience defining data classification, tagging, cataloging, access, and governance standards.

• Strong understanding of data protection controls, including encryption, masking, tokenization, and identity/access controls.

• Understanding of Data Security Posture Management (DSPM) and its role within an enterprise data security architecture.

• Experience developing reusable security patterns, reference architectures, and standards for engineering implementation.

• Ability to connect data security, identity, governance, and platform security controls.

• Strong communication and stakeholder-management skills, including the ability to explain technical security risks in business terms.

• Ability to collaborate with engineering teams and guide implementation without necessarily performing all tool configuration or administration.

• Must be located within reasonable commuting distance of Westbrook, Maine, or elsewhere in New England with the ability to travel to Westbrook for onsite visits a few times per month.