Data Security Architect

Define the enterprise data security architecture, including data discovery and classification (DSPM integration), DLP/CASB control strategy (M365, Box, endpoint), data platform security controls (Snowflake, Databricks), and application/API data protection patterns (cloud-first) Establish standard control patterns including data classification and tagging models, encryption, tokenization, and masking strategies, data access control models (RBAC, ABAC, RLS), and data movement and sharing controls Ensure consistency and scalability of data protection across SaaS, cloud, and application environments Design and drive integration across Snowflake and Alation (data catalog and ownership mapping), Entra ID (identity-driven access controls and policy enforcement), M365 and Box (data loss prevention and collaboration controls), and cloud environments (AWS, Azure, Google Cloud Platform) Ensure alignment between DSPM findings, DLP policies, and data platform controls Translate data risk insights into technical control implementation requirements Develop and maintain a Data Security Reference Architecture Define secure design patterns and implementation guidance for data engineering, application development, and cloud platform teams Enable engineering teams to embed data protection into systems and workflows rather than relying solely on downstream tooling Partner with the Data Security Program Lead, Data Security Engineering Lead, and Cyber Defense/SOC teams to provide architectural direction and design input Ensure execution teams can implement effectively and controls remain aligned to risk priorities Define and evolve data protection standards aligned to the Data Management Policy (classification, handling, retention) and regulatory requirements (HIPAA, GDPR, etc.) Evaluate emerging capabilities and tools including DSPM platforms, DLP/CASB solutions, and data platform-native controls Continuously improve architecture based on new data risks, platform evolution (Snowflake, AWS, etc.), and feedback from operations and engineering

8+ years of experience Bachelors Degree AWS Certified Solutions Architect CISSP CCSP

Skills Snowflake Security Databricks Security Cloud Security Architecture DSPM Tools DLP/CASB Platforms Entra ID M365 Security Box Security Encryption, Tokenization, and Data Masking Access Control Models (RBAC, ABAC, RLS) Data Catalog and Governance Tools AWS Azure and Google Cloud Platform Application/API Data Protection Security Architecture Data Protection Architecture Data Classification and Tagging Data Access Governance Regulatory Compliance Technical Documentation Stakeholder Communication Cross-functional Collaboration Executive Presentations Data Security Program Implementation