Jobs → Data & Analytics → AWS Data Platform Security Architect

About the Role We are looking for an AWS Data Platform Security Architect to join our team for a 6-month contract. This role focuses on establishing AWS Glue Data Catalog coverage, designing secure cross-account access models, and producing security-review-ready documentation for a Databricks-based scanning workload. Key Responsibilities • Establish AWS Glue Data Catalog coverage across in-scope accounts and buckets • Document current authentication and data access methods as a baseline for replacement • Design least-privilege cross-account access model using IAM roles, trust policies, and S3 bucket policies • Design network access using VPC endpoints, PrivateLink, and serverless networking • Produce security-review-ready documentation including data flows, trust boundaries, and permission scopes • Secure information security review slot and steer design through approval • Identify pre-approved non-production account for prototype • Author security and governance model deliverable and operating model Requirements • 7+ years in cloud or data platform security architecture with deep AWS experience • Cross-account IAM design expertise including role and trust policy authoring • S3 security knowledge including bucket policies and access points • Cross-account KMS key policies and grants experience • AWS Glue Data Catalog and crawlers knowledge • VPC endpoints, PrivateLink, and private networking experience • Databricks on AWS security or comparable managed-service security model • Track record of security designs passing formal enterprise security review Benefits • Opportunity to work on critical security architecture in AWS environment • Chance to influence security design for scanning workloads • Contract position with potential for extension