Data Security Architect

We are seeking a highly experienced Data Security Architect to define, implement, and evolve enterprise-wide data security architecture for a large-scale cloud-first environment. This role requires extensive expertise in data protection, cloud security architecture, Snowflake security, data governance, DSPM platforms, DLP solutions, and identity-driven access controls., As the Data Security Architect, you will lead the design and implementation of enterprise data protection strategies by:

• Defining enterprise-wide data security architecture standards
• Designing data discovery and classification frameworks using DSPM technologies
• Establishing data classification, labeling, and tagging models
• Developing encryption, tokenization, and data masking strategies
• Creating Data Loss Prevention (DLP) and Cloud Access Security Broker (CASB) control frameworks
• Designing role-based and attribute-based access control models (RBAC and ABAC)
• Implementing data movement, sharing, and retention controls
• Ensuring consistent security controls across cloud, SaaS, and application environments

Platform Security Integration

• Design and drive security integration across enterprise platforms, including:
• Snowflake security architecture
• Databricks security controls
• Microsoft 365 security and DLP controls
• Box governance and collaboration security
• Microsoft Entra ID identity security and access management
• AWS cloud security architecture
• Azure security services
• Google Cloud Platform security controls
• Data catalog and governance solutions such as Alation
• Additional responsibilities include:
• Aligning DSPM findings with enterprise security controls
• Mapping data ownership and governance requirements
• Translating business and compliance risks into technical security requirements
• Establishing scalable cloud security patterns and frameworks

Reference Architecture & Engineering Enablement

The successful candidate will:

• Develop and maintain an enterprise Data Security Reference Architecture
• Create secure design patterns for application development teams
• Establish implementation guidance for cloud engineering teams
• Support data engineering teams with secure data architecture best practices
• Enable security-by-design across platforms, workflows, and applications
• Promote proactive data protection rather than downstream remediation

Collaboration & Technical Leadership

Partner closely with:

• Data Security Program Leadership
• Security Engineering Teams
• Cyber Defense and SOC Teams
• Data Engineering Teams
• Cloud Platform Teams
• Application Development Teams
• Responsibilities include:
• Delivering architectural guidance for new initiatives
• Influencing enterprise security decisions
• Supporting implementation teams during deployment efforts
• Ensuring security controls remain aligned to business and regulatory requirements

Governance, Compliance & Continuous Improvement

• Lead the evolution of enterprise data security standards by:
• Maintaining data protection policies and standards
• Supporting regulatory compliance initiatives
• Improving enterprise data governance practices
• Evaluating emerging security technologies and data protection capabilities
• Assessing new DSPM, DLP, and CASB platforms
• Continuously refining architecture based on evolving threats, operational feedback, and business needs, This Data Security Architect position offers the opportunity to influence enterprise-wide cybersecurity strategy while driving modern cloud security, data governance, and data protection initiatives. You will work with leading technologies including Snowflake, Databricks, AWS, Azure, Microsoft 365, Entra ID, Box, DSPM, DLP, and CASB platforms while helping shape the future of enterprise data security.

The ideal candidate will have a proven track record designing and scaling data security programs across cloud platforms, SaaS applications, data engineering environments, and enterprise identity ecosystems. Candidates must possess 8 to 12 years of hands-on experience in data security, cloud security, or security architecture and demonstrate success implementing enterprise-grade security controls and governance frameworks., Candidates must possess 8 to 12 years of professional experience in Data Security, Cloud Security, or Security Architecture.

• Applicants should demonstrate significant experience in:
• Enterprise data security architecture
• Cloud-native security design
• Security architecture frameworks and standards
• Data governance and protection programs
• Cloud and SaaS security implementations
• Enterprise cybersecurity strategy

Required Technical Expertise

Strong experience designing and securing:

• Snowflake data platforms
• Databricks environments
• Microsoft 365 environments
• Box collaboration platforms
• Microsoft Entra ID
• AWS cloud environments
• Azure cloud services
• Google Cloud Platform environments

Hands-on expertise with:

• Data Security Posture Management (DSPM)
• Data Loss Prevention (DLP)
• Cloud Access Security Broker (CASB) solutions
• Data classification and tagging frameworks
• Data masking and tokenization technologies
• Encryption and key management strategies
• Role-Based Access Control (RBAC)
• Attribute-Based Access Control (ABAC)
• Data governance and catalog platforms
• Regulatory compliance requirements including GDPR, SOC 2, and PCI DSS

Leadership & Communication Skills

Candidates must demonstrate the ability to:

• Design enterprise-scale security architectures
• Translate cyber risk into technical controls
• Communicate effectively with technical and business stakeholders
• Lead architectural discussions and security reviews
• Produce architecture diagrams, technical documentation, and executive presentations
• Drive consensus across cross-functional teams

Preferred Qualifications

• Experience implementing enterprise DSPM programs
• Background supporting data engineering and analytics organizations
• Experience designing security controls within Snowflake environments
• CISSP certification
• CCSP certification
• AWS Certified Solutions Architect certification
• Other relevant cloud security or cybersecurity certifications

The salary range for this role reflects the minimum and maximum compensation for the role. Offers are typically made between the range minimum and the range midpoint. Actual compensation will be determined based on job-related skills, experience, and expertise, as evaluated during the interview process. Compensation may also vary based on where a role is performed.