Data Security Architect

Replaced - IDE-JB-00264

Job Overview

The Data Security Architect is responsible for defining the enterprise architecture, control patterns, and design standards for protecting sensitive data acrosss platforms, including Snowflake, Databricks, M365, Box, and cloud applications (AWS-first).This role ensures that data security capabilities such as DSPM, DLP, and data platform controls are designed correctly, integrated across systems, and scalable, enabling consistent protection of sensitive data across the enterprise.This is a design and architecture leadership role, focused on the how of data protection, not day-to-day program execution or tool operations.

Job ResponsibilitiesIn this role, you will be responsible for...Data Security Architecture & DesignDefine the enterprise data security architecture, including:o Data discovery and classification (DSPM integration)o DLP/CASB control strategy (M365, Box, endpoint)o Data platform security controls (Snowflake, Databricks)o Application/API data protection patterns (cloud-first)Establish standard control patterns, including:o Data classification and tagging modelso Encryption, tokenization, and masking strategieso Data access control models (RBAC, ABAC, RLS)o Data movement and sharing controlsEnsure consistency and scalability of data protection across SaaS, cloud, and application environments

Platform Integration & Control Alignment

Design and drive integration across:Snowflake and Alation (data catalog and ownership mapping)Entra ID (identity-driven access controls and policy enforcement)M365 and Box (data loss prevention and collaboration controls)Cloud environments (AWS, Azure, GCP)Ensure alignment between:DSPM findingsDLP policiesData platform controlsTranslate data risk insights into technical control implementation requirements

Reference Architecture & Engineering Enablement

Develop and maintain a Data Security Reference ArchitectureDefine secure design patterns and implementation guidance for:Data engineering teamsApplication development teamsCloud platform teamsEnable engineering teams to embed data protection into systems and workflows, rather than relying solely on downstream toolingCollaboration with Program & Engineering Teams

Partner with:Data Security Program Lead (execution and governance)Data Security Engineering Lead (implementation delivery)Cyber Defense / SOC teams (operational integration)Provide architectural direction and design input while ensuring:Execution teams can implement effectivelyControls remain aligned to risk priorities

Standards, Governance & Continuous Improvement

Define and evolve data protection standards aligned to:Data Management Policy (classification, handling, retention)Regulatory requirements (HIPAA, GDPR, etc.)Evaluate emerging capabilities and tools:DSPM platformsDLP/CASB solutionsData platform-native controlsContinuously improve architecture based on:New data risksPlatform evolution (Snowflake, AWS, etc.)Feedback from operations and engineering

Required Experience & Qualifications

General Qualifications

8 12 years experience in:Data security, cloud security, or security architectureStrong experience designing security for:Cloud-native data platforms (Snowflake, Databricks)SaaS and collaboration environments (M365, Box)Enterprise identity systems (Entra ID)Proven ability (via outcomes) to design and scale:Data classification and tagging modelsData protection controls (DLP, masking, encryption)Access control models (RBAC, ABAC)Experience working across:Data engineeringApplication engineeringCloud platform teamsTechnical Expertise

Deep understanding of:Data protection architecture and lifecycle managementData platforms (Snowflake strongly preferred)Cloud environments (AWS preferred; Azure/GCP familiarity)Working familiarity with:DSPM tools (e.g., Cyera, BigID, etc.)CASB/DLP platforms (M365, endpoint, etc.)Data catalog and governance tools (e.g., Alation)Knowledge of:Encryption, tokenization, and data masking techniquesData access governance models and patternsUnderstanding of regulatory frameworks relevant to(GDPR, SOC2, PCI DSS)

Leadership & Professional Skills

Strong architectural thinking and system design capabilityPredilection towards action to achieve outcomes and refine designAbility to translate business data risk into technical architectureExcellent collaboration skills across engineering and security domainsAbility to communicate via architectural diagrams, whitepapers, presentationsStrong communication skills to:Influence technical and non-technical stakeholdersAlign teams on architecture and standards

Preferred QualificationsExperience implementing enterprise data security or DSPM programsBackground working with data engineering or analytics teamsExperience designing controls in Snowflake or similar platformsCertifications (AWS Certified Solutions Architect, CISSP, CCSP, etc.)