> Markdown version of [/jobs/ext/170429-it-principal-consultant-data-on-cloud-platform-aws](https://www.wearedevelopers.com/jobs/ext/170429-it-principal-consultant-data-on-cloud-platform-aws). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# IT - Principal Consultant | Data On Cloud - Platform | AWS

- **Company:** Cloudspace LLC
- **Location:** Irvine, CA, United States
- **Experience:** Expert
- **Salary:** $145,600.0
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Amazon Elastic Compute Cloud, Amazon S3, Cloud Computing, Cloud Computing Security, Cyber Security, Information Engineering, Data Governance, Data Infrastructure, Data Security, Federal Information Processing Standards (FIPS), Identity and Access Management, Network Security, Role-Based Access Control, Power BI, Azure Active Directory, Systems Integration, Transport Layer Security, Okta, Amazon Virtual Private Cloud (VPC), Information Technology, Enterprise Integration, Data Management, CIS Benchmarks, Databricks
- **Published:** May 14, 2026
- **Apply:** https://www.careerjet.com/jobad/uscba64b5b64286a806257190925fa6ad6

## About the Role

Design, implement and govern data security controls for AWS and Databricks environments
Identity and Access management (IAM)
Security Monitoring & Incident Response
Nice to Have Skills:
AI automation skills, Bachelor s degree in Computer Science, Information Security, or related field (or equivalent experience).
8+ years of experience in cloud security engineering, with a focus on AWS and data platforms.
Hands-on experience securing Databricks environments and integrating with enterprise IAM solutions.
Technical Skills
Strong knowledge of AWS security services (IAM, KMS, CloudTrail, GuardDuty, VPC).
Expertise in Databricks security features, cluster hardening, and workspace governance.
Familiarity with Microsoft Power BI integration and secure data access patterns.
Proficiency in implementing RBAC/ABAC, SSO/MFA, and SCIM provisioning.
Understanding of encryption standards (FIPS 140, TLS 1.2+) and CIS benchmarks.
Certifications (Preferred)
AWS Certified Security Specialty
Databricks Certified Data Engineer or Security Professional
CISSP or CISM
Microsoft Certified: Power BI Data Analyst Associate (optional but a plus)
Soft Skills
Strong analytical and problem-solving skills.
Excellent communication and collaboration abilities.
Ability to lead requirements gathering and produce clear documentation.
Comfortable working in a fast-paced, cross-functional environment.
Minimum Years of Experience:
8+ years
Certifications Needed

## Description

We are seeking a highly skilled Cloud & Data Platform Security Engineer to design, implement, and govern security controls for AWS and Databricks environments that enable secure data analytics and reporting in Microsoft Power BI. This role will focus on identity and access management (IAM), compliance, security monitoring, and configuration hardening across cloud and data platforms., Identity & Access Management (IAM) Implementation & Governance
Design and enforce RBAC/ABAC policies, SCIM provisioning, and SSO/MFA for Databricks workspaces.
Manage identity lifecycle, including onboarding/offboarding and periodic access reviews.
Integrate Databricks and AWS services with enterprise IAM solutions (e.g., Azure AD, Okta).
Implement AWS IAM roles, policies, and permission boundaries for secure data access.
Ensure secure integration between AWS, Databricks, and Microsoft Power BI for reporting.
Security Architecture & Design
Develop and maintain security architecture for AWS and Databricks environments supporting Power BI analytics.
Design secure data pipelines and enforce encryption in transit and at rest across AWS S3, Databricks, and Power BI.
Implement network security controls (VPC, security groups, private endpoints) for AWS and Databricks connectivity.
Requirements Gathering & Documentation
Lead requirements gathering sessions with stakeholders to define security needs for AWS, Databricks, and Power BI integrations.
Document security requirements, architecture diagrams, and implementation plans.
Maintain detailed security design documentation and update as environments evolve.
Ensure traceability between business requirements and implemented security controls.
Security Monitoring & Incident Response
Investigate and respond to IAM-related and platform security incidents and defects
Compliance & Risk Management
Ensure adherence to SOC 2, HIPAA, GDPR, and internal security standards across AWS and Databricks.
Implement data governance policies for sensitive data used in Power BI reporting.
Configuration & Hardening
Apply Databricks Security Profile features (CIS-hardened images, FIPS 140 encryption, TLS 1.2+).
Validate secure cluster configurations and enforce encryption policies in Databricks and AWS.
Harden AWS services (EC2, S3, IAM) following CIS benchmarks and best practices.
Collaboration & Reporting
Partner with data engineering, BI, and cloud teams to implement security best practices.
Provide security posture reports and IAM metrics to leadership.
Support secure integration of Power BI with AWS and Databricks for enterprise reporting.


## Related Videos

- [Beyond Dashboards: Fixing Text-to-SQL with Semantic RAG](https://www.wearedevelopers.com/videos/2036-beyond-dashboards-fixing-text-to-sql-with-semantic-rag)
- [WeAreDevelopers LIVE - CSS is DOOMed](https://www.wearedevelopers.com/videos/1838-wearedevelopers-live-css-is-doomed)
- [From Messy Queries to Scalable Systems - How Data Engineering actually works](https://www.wearedevelopers.com/videos/100203-from-messy-queries-to-scalable-systems-how-data-engineering-actually-works)
- [REST, GraphQL, gRPC, and more: A comparison of modern API styles](https://www.wearedevelopers.com/videos/100247-rest-graphql-grpc-and-more-a-comparison-of-modern-api-styles)
- [Blueprints for Success: Steering a Global Data & AI Architecture](https://www.wearedevelopers.com/videos/1577-blueprints-for-success-steering-a-global-data-ai-architecture)
- [Hate organising your photos? Try it with 5 Terabytes](https://www.wearedevelopers.com/videos/79-hate-organising-your-photos-try-it-with-5-terabytes)

## Related Articles

- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Making Data Warehouses Fast: A Developer’s Story](https://www.wearedevelopers.com/magazine/107-making-data-warehouses-fast-a-developer-s-story)
- [Coffee with Developers - Maria Apazoglou - Making AI understandable for all in production](https://www.wearedevelopers.com/magazine/475-coffee-with-developers-maria-apazoglou-making-ai-understandable-for-all-in-production)
- [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)
- [Top Big Data Technologies That You Need to Know](https://www.wearedevelopers.com/magazine/108-top-big-data-technologies-that-you-need-to-know)
- [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers)