Jobs → Data & Analytics → AWS Data Platform Security Architect

About the Role The client needs a security architect to design and implement an access model for a Databricks workspace profile across AWS accounts, focusing on governance. The role involves establishing AWS Glue Data Catalog coverage, documenting current authentication methods, and designing secure cross-account access models. Key Responsibilities • Establish AWS Glue Data Catalog coverage across accounts and buckets, and quantify the gap • Document current authentication and data access methods as a baseline for replacement • Design least-privilege cross-account access model with IAM roles, trust policies, S3 bucket policies, and KMS key policies • Design network access using VPC endpoints, PrivateLink, and serverless networking • Produce security-review-ready documentation including data flows, trust boundaries, and compensating controls • Secure information security review slot and steer design through approval • Identify pre-approved non-production account for prototype • Author security and governance model deliverable and operating model Requirements • 10+ years in cloud or data platform security architecture with deep AWS expertise • Cross-account IAM design experience with role and trust policy authoring • S3 security knowledge including bucket policies and access points • Cross-account KMS key policies and grants experience • AWS Glue Data Catalog and crawlers knowledge • VPC endpoints, PrivateLink, and private networking experience • Databricks on AWS security knowledge • Track record of security designs passing formal enterprise security review • Experience securing data discovery or DSPM-style scanning workloads