Jobs → Data & Analytics → AWS Data Platform Security Architect

About the Role We are looking for an AWS Data Platform Security Architect to join our team. This role focuses on designing secure access models for Databricks workspace profiles across multiple AWS accounts in a regulated environment. Key Responsibilities • Establish AWS Glue Data Catalog coverage across in-scope accounts and quantify the gap • Document how the incumbent product authenticates and reaches data today • Design least-privilege cross-account access: IAM roles, trust policies, S3 bucket policies, KMS key policies • Design network access using VPC endpoints, PrivateLink and serverless networking • Produce security-review-ready documentation: data flows, trust boundaries, threat model • Secure the infosec review slot in week 1 and steer the design to approval • Author the security and governance model plus the production operating model Requirements • 7+ years in cloud/data platform security architecture, with deep AWS expertise • Cross-account IAM design (trust policies, permission boundaries, condition keys) • S3 security at depth (bucket policies, access points) • Cross-account KMS key policies and grants • AWS Glue Data Catalog, crawlers and Lake Formation • VPC endpoints, PrivateLink and private networking • Databricks on AWS security (or a comparable managed-service security model) • A track record of designs that cleared formal security review in regulated organizations Nice to have: STRIDE/threat modelling, financial services experience, AWS Security Specialty, Control Tower/SCPs, DSPM-style scanning experience.