Security Architect (AWS & Data Platform) : NJ, DC - Onsite

Position: Security Architect (AWS & Data Platform )

Location: NJ, DC Onsite role.


This role is not

A general AWS landing-zone architect post scope is the scanning access model and getting it approved. Not a security operations or incident response function. And not the approver: this role prepares and defends the design; the client approves it.


Job Description:

About the role : The client needs the access model that would let a Databricks workspace profile data across their AWS accounts from a governance standpoint, not a business one. A scanning identity with broad read access across a regulated estate attracts real scrutiny, and security approval lead times can exceed the length of this engagement. You exist to get that answer early, and in a form the client s information security function will accept.

You also own the single question that most shapes the recommendation: how much of the in-scope S3 estate is registered in the AWS Glue Data Catalog. Collibra s S3 profiling depends on it, so that number largely decides the target-state option. Nobody currently knows it.