> Markdown version of [/jobs/ext/2643480-databricks-enterprise-lead-security-architect-principal-it-software-engineer](https://www.wearedevelopers.com/jobs/ext/2643480-databricks-enterprise-lead-security-architect-principal-it-software-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Databricks Enterprise Lead Security Architect -Principal IT Software Engineer

- **Company:** Databricks
- **Location:** Mountain View, CA, United States
- **Experience:** Expert
- **Salary:** $258,300.0
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Microsoft Azure, Software as a Service, Cloud Computing, Cloud Engineering, Cyber Security, Data Governance, Data Security, Identity and Access Management, Intrusion Detection and Prevention, Open Web Application Security, PCI Data Security Standards, Role-Based Access Control, Red Team (Cyber Security), Web Application Security, Security Information and Event Management, Software Engineering, Software Vulnerability Management, Scripting, Google Cloud, Okta, Software Security, Multi-Cloud, Amazon Virtual Private Cloud (VPC), Information Technology, SailPoint, Terraform, Security Orchestration, Automation & Response, Databricks
- **Published:** August 31, 2026
- **Apply:** https://www.careerboard.com/us/en/find-jobs-in-United-States/-2BBF13B733EBF33BB7/

## About the Role

* Bachelor's degree in Computer Science, Information Security, Engineering, or a related field.
 * Preferred: Master's degree in Information Security.
 * Minimum 12 years in cybersecurity with 5+ years in security architecture or senior technical roles.
 * Experience designing and securing complex multi-cloud environments (AWS, Azure, GCP).
 * Hands-on experience with Terraform, IaC, scripting, and security automation.
 * Deep knowledge of IAM systems (Okta, SailPoint, VDI, Entra ID) and data protection practices.
 * Proficiency with SIEM/XDR, cloud-native threat detection, OWASP, API security, and web application security.
 * Certifications such as CISSP, CCSP, CEH, AWS Security Specialty, and/or AWS Solutions Architect - Professional are preferred.

## Description

* Design and implement secure, scalable reference architectures for Databricks IT across Cloud Infrastructure, SaaS, Custom Built Applications, and Data & AI systems.
 * Establish and enforce security controls for workspace isolation, Unity Catalog data governance, VPC configurations, PrivateLink, and IP allow lists.
 * Lead IAM strategy: SSO, SCIM provisioning, RBAC, and MFA best practices for enterprise identities.
 * Secure data at rest and in transit using customer-managed keys; implement data exfiltration prevention measures.
 * Develop cluster security policies and conduct compliance monitoring for HIPAA, PCI-DSS, and FedRAMP.
 * Conduct offensive security tests, threat modeling, and support incident response, vulnerability management, and red team activities.
 * Mentor security engineers and developers on secure design and best practices.


## Related Videos

- [Infrastructure as Code: The Developer's Secret Weapon](https://www.wearedevelopers.com/videos/1221-infrastructure-as-code-the-developer-s-secret-weapon)
- [Blueprints for Success: Steering a Global Data & AI Architecture](https://www.wearedevelopers.com/videos/1577-blueprints-for-success-steering-a-global-data-ai-architecture)
- [Implementing Feature Environments with AWS and Terraform](https://www.wearedevelopers.com/videos/531-implementing-feature-environments-with-aws-and-terraform)
- [From Messy Queries to Scalable Systems - How Data Engineering actually works](https://www.wearedevelopers.com/videos/100203-from-messy-queries-to-scalable-systems-how-data-engineering-actually-works)
- [Modern Data Architectures need Software Engineering](https://www.wearedevelopers.com/videos/1030-modern-data-architectures-need-software-engineering)
- [Terraform for Developers](https://www.wearedevelopers.com/videos/3-terraform-for-developers)

## Related Articles

- [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Top Big Data Technologies That You Need to Know](https://www.wearedevelopers.com/magazine/108-top-big-data-technologies-that-you-need-to-know)
- [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence)