Databricks Security Architect

Role: Databricks Security Architect

Location: New York City, NY (Onsite)
Job Type: Contract
Work Environment: Enterprise Cloud & Data Platform

We are seeking an experienced Databricks Security Architect with strong expertise in Databricks security on AWS, Unity Catalog, cloud IAM, data governance, and enterprise security architecture.

The ideal candidate will design and implement secure, scalable Databricks environments while establishing security guardrails, identity controls, data governance, network security, encryption, monitoring, and compliance standards.

Key Responsibilities

• Design end-to-end security architecture for Databricks on AWS
• Architect and administer Databricks Unity Catalog
• Define catalogs, schemas, tables, views, external locations, and storage credentials
• Implement RBAC, ABAC, least-privilege access, and identity governance
• Integrate Databricks with enterprise IAM platforms and implement SSO/MFA
• Design authentication using AWS IAM, IAM roles, service principals, and identity federation
• Establish data classification, access policies, and governance controls
• Implement encryption at rest/in transit using AWS KMS and Databricks security controls
• Design secrets management using AWS Secrets Manager and Databricks Secret Scopes
• Define AWS networking and secure connectivity including VPC, private connectivity, and security groups
• Establish audit logging, monitoring, alerting, and security-event requirements
• Develop enterprise security guardrails and access governance processes
• Implement secure Databricks data-sharing controls
• Conduct security assessments and identify vulnerabilities/access risks
• Partner with Cloud, Data Engineering, IAM, Cybersecurity, Compliance, and Infrastructure teams
• Develop security architecture documentation, standards, policies, and procedures

Required Skills

• 8+ years in cybersecurity, cloud security, data security, or security architecture
• Strong hands-on Databricks security architecture on AWS
• Deep expertise in Databricks Unity Catalog
• Strong AWS IAM knowledge — roles, policies, federation, and identity management
• Experience with SSO, MFA, RBAC, ABAC, and least-privilege models
• Strong AWS networking and cloud security architecture experience
• AWS KMS, encryption, secrets management, and key management
• Audit logging, monitoring, security controls, and compliance
• Data classification and sensitive-data protection
• Enterprise security guardrails and governance

Preferred Skills

• Databricks certifications
• AWS Certified Security – Specialty / Solutions Architect
• Okta, Microsoft Entra ID/Azure AD, Ping Identity
• Terraform / Infrastructure as Code
• SOC 2, SOX, PCI-DSS, HIPAA, GDPR
• SIEM and centralized security monitoring platforms
• Large-scale enterprise data platforms and data lakes
• Databricks data-sharing/security implementations

Core Technologies

Databricks | Unity Catalog | AWS | AWS IAM | SSO | MFA | RBAC | ABAC | Identity Governance | Data Security | Data Classification | AWS KMS | Encryption | AWS Secrets Manager | VPC | Network Security | Audit Logging | Compliance | Terraform | Cloud Security