AL
Data Security Architect
Artech LLC
🇺🇸 United States
On-site
3 days ago
$45.00 – $58.57 / hour
- Snowflake
- Databricks
- M365
- AWS
- DLP
- RBAC
- ABAC
- Alation
- Azure
- GCP
- HIPAA
- GDPR
- SOC2
- PCI DSS
- System Design
- CISSP
- CCSP
3 days ago
The Data Security Architect is responsible for defining the enterprise architecture, control patterns, and design standards for protecting sensitive data across ***’s platforms, including Snowflake, Databricks, M365, Box, and cloud applications (AWS-first).
This role ensures that data security capabilities—such as DSPM, DLP, and data platform controls—are designed correctly, integrated across systems, and scalable, enabling consistent protection of sensitive data across the enterprise.
This is a design and architecture leadership role, focused on the “how” of data protection, not day-to-day program execution or tool operations.
Job Responsibilities
In this role, you will be responsible for...
· Data Security Architecture & Design
· Define the enterprise data security architecture, including:
o Data discovery and classification (DSPM integration)
o DLP/CASB control strategy (M365, Box, endpoint)
o Data platform security controls (Snowflake, Databricks)
o Application/API data protection patterns (cloud-first)
· Establish standard control patterns, including:
o Data classification and tagging models
o Encryption, tokenization, and masking strategies
o Data access control models (RBAC, ABAC, RLS)
o Data movement and sharing controls
· Ensure consistency and scalability of data protection across SaaS, cloud, and application environments
Platform Integration & Control Alignment
Design and drive integration across:
Snowflake and Alation (data catalog and ownership mapping)
Entra ID (identity-driven access controls and policy enforcement)
M365 and Box (data loss prevention and collaboration controls)
Cloud environments (AWS, Azure, GCP)
Ensure alignment between:
DSPM findings
DLP policies
Data platform controls
Translate data risk insights into technical control implementation requirements
Reference Architecture & Engineering Enablement
Develop and maintain a Data Security Reference Architecture
Define secure design patterns and implementation guidance for:
Data engineering teams
Application development teams
Cloud platform teams
Enable engineering teams to embed data protection into systems and workflows, rather than relying solely on downstream tooling
Collaboration with Program & Engineering Teams
Partner with:
Data Security Program Lead (execution and governance)
Data Security Engineering Lead (implementation delivery)
Cyber Defense / SOC teams (operational integration)
Provide architectural direction and design input while ensuring:
Execution teams can implement effectively
Controls remain aligned to risk priorities
Standards, Governance & Continuous Improvement
Define and evolve data protection standards aligned to:
Data Management Policy (classification, handling, retention)
Regulatory requirements (HIPAA, GDPR, etc.)
Evaluate emerging capabilities and tools:
DSPM platforms
DLP/CASB solutions
Data platform-native controls
Continuously improve architecture based on:
New data risks
Platform evolution (Snowflake, AWS, etc.)
Feedback from operations and engineering
Required Experience & Qualifications
General Qualifications
8–12 years experience in:
Data security, cloud security, or security architecture
Strong experience designing security for:
Cloud-native data platforms (Snowflake, Databricks)
SaaS and collaboration environments (M365, Box)
Enterprise identity systems (Entra ID)
Proven ability (via outcomes) to design and scale:
Data classification and tagging models
Data protection controls (DLP, masking, encryption)
Access control models (RBAC, ABAC)
Experience working across:
Data engineering
Application engineering
Cloud platform teams
Technical Expertise
Deep understanding of:
Data protection architecture and lifecycle management
Data platforms (Snowflake strongly preferred)
Cloud environments (AWS preferred; Azure/GCP familiarity)
Working familiarity with:
DSPM tools (e.g., Cyera, BigID, etc.)
CASB/DLP platforms (M365, endpoint, etc.)
Data catalog and governance tools (e.g., Alation)
Knowledge of:
Encryption, tokenization, and data masking techniques
Data access governance models and patterns
Understanding of regulatory frameworks relevant to *** (GDPR, SOC2, PCI DSS)
Leadership & Professional Skills
Strong architectural thinking and system design capability
Predilection towards action to achieve outcomes and refine design
Ability to translate business data risk into technical architecture
Excellent collaboration skills across engineering and security domains
Ability to communicate via architectural diagrams, whitepapers, presentations
Strong communication skills to:
Influence technical and non-technical stakeholders
Align teams on architecture and standards
Preferred Qualifications
Experience implementing enterprise data security or DSPM programs
Background working with data engineering or analytics teams
Experience designing controls in Snowflake or similar platforms
Certifications (AWS Certified Solutions Architect, CISSP, CCSP, etc.)
Data Security Architect · Artech LLC