Senior Technical Data Security Architect

GuidePoint Security

. Design and maintain end-to-end data security architecture across Azure, Microsoft Fabric, Azure Synapse Analytics, ADLS Gen2, and Databricks Lakehouse .

Posted 11/9/2026full-timeRemote • United StatesSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in designing and maintaining data security architectures across Azure and Databricks, with a strong focus on compliance with GDPR, CCPA, HIPAA, and other regulatory standards. Proficient in implementing Microsoft Purview and Zero Trust frameworks to ensure robust data governance and security.

Highest-signal resume keywords

Azure Data Lake Storage Gen2Databricks Unity CatalogMicrosoft PurviewEntra ID GovernanceGDPR Compliance

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Data Security ArchitectureSQLPythonPySparkPowerShellTerraformRBACABACData GovernanceData Encryption

Soft Skills

Strong Communication SkillsMentoringCollaborationLeadershipProblem-Solving

Tools & Technologies

Azure Synapse AnalyticsAzure Key VaultMicrosoft FabricAzure SQL DatabaseSnowflakeMicrosoft Defender for CloudAzure Private EndpointsVNet IntegrationNetwork Security GroupsMLflow

Certifications & Qualifications

AZ-500DP-203Databricks Certified Data Engineer ProfessionalCISSPCISM

Industry Keywords

Zero TrustData MinimizationData ClassificationCompliance ProgramsIncident ResponseData MeshAI/ML SecurityRegulated Industry ExperienceSensitivity LabelsData Access Logging

Tech Stack

Tools & technologies

AWSAzureCloudDACGoogle Cloud PlatformPySparkPythonSnowflakeSQLTerraformUnityVault

About the role

Key responsibilities & impact

Design and maintain end-to-end data security architecture across Azure, Microsoft Fabric, Azure Synapse Analytics, ADLS Gen2, and Databricks Lakehouse
Define and enforce enterprise data classification, labeling, and handling standards aligned with Microsoft Purview Information Protection
Develop reference architectures and security blueprints for data ingestion, transformation, storage, and consumption layers
Lead threat modeling for data pipelines and analytics workloads
Establish Zero Trust data security across data platforms and integration points
Architect and govern Microsoft Fabric permissions, sensitivity labels, and OneLake security
Design RBAC and ABAC strategies across Azure data services and Databricks
Implement and operationalize Microsoft Purview for catalog governance, lineage, and sensitivity classification
Configure Azure Private Endpoints, VNet integration, and network security groups
Oversee encryption, Azure Key Vault, customer-managed keys, and data protection standards
Enforce Entra ID Conditional Access, PIM, and managed identities
Lead Microsoft Defender for Cloud DSPM implementation and tuning
Architect Databricks Unity Catalog, workspace security, credential governance, OAuth, masking, fine-grained access controls, audit logging, workflows, notebooks, and job-cluster security
Review MLflow models and Feature Store configurations for data leakage risks
Ensure compliance with GDPR, CCPA, HIPAA, SOC 2 Type II, and PCI-DSS
Design audit trails and data-access logging architectures; conduct risk assessments, gap analyses, and maturity evaluations
Maintain security runbooks, policies, and standards documentation
Coordinate DSARs and regulatory inquiries with legal, compliance, and privacy teams
Advise data engineering, analytics engineering, and BI teams throughout development
Lead security architecture review boards for new data initiatives, integrations, and platform changes
Mentor engineers and architects; lead knowledge-sharing sessions and workshops
Partner with engineering managers and HR on competency frameworks, leveling guides, and certification pathways
Maintain a data security community of practice
Collaborate with SecOps and SOC teams on detection rules, incident response playbooks, and forensic capabilities
Present security posture, risk findings, and remediation roadmaps to executives and board-level stakeholders

Requirements

What you’ll need

7+ years of experience in data engineering, data architecture, or information security, with at least 7 years focused on data security architecture OR Bachelor’s Degree and 3+ years of experience in those fields, with at least 3 years focused on data security architecture
Deep hands-on expertise with Azure Data Lake Storage Gen2, Azure Synapse Analytics, Azure Data Factory, Azure SQL Database, and Microsoft Fabric
Expertise designing and implementing Databricks Unity Catalog, including workspace federation, metastore design, and fine-grained access control
Strong proficiency with Microsoft Purview, including data map configuration, classification rules, sensitivity labels, and policy enforcement
Expert-level knowledge of Entra ID, Managed Identities, Conditional Access, PIM, and service principal governance
Hands-on experience with Azure Key Vault, customer-managed encryption keys, and secrets management integration
Understanding of Zero Trust, least privilege, data minimization, and data governance frameworks
Experience with GDPR, CCPA, HIPAA, SOC 2, and PCI-DSS compliance programs as applied to data platforms
Proficiency in SQL and at least one of Python, PySpark, PowerShell, or Terraform for security automation
Experience securing data workloads across Azure, AWS, and/or GCP multi-cloud environments
Hands-on experience with Snowflake data security, including RBAC/DAC, column-level and row-level security, dynamic data masking, network policies, Private Link, and Data Sharing governance
Experience supporting presales activities, including technical discovery, RFP/RFI responses, solution demonstrations, and client-facing proposals and statements of work
Strong written and verbal communication skills
Preferred: active AZ-500, DP-203, Databricks Certified Data Engineer Professional, CISSP, or CISM certifications; Microsoft Sentinel; Databricks Delta Sharing, Cleanroom, and cross-cloud governance; Terraform or Bicep; data mesh; AI/ML security; regulated-industry experience
Embraces emerging technologies, including AI tools

Benefits

Comp & perks

Remote workforce primarily; U.S. based only
Up to 10% travel
Group Medical Insurance options: Zero Deductible PPO Plan; GuidePoint pays 90% of employee premiums and 70% of family premiums
High Deductible Health Plan with HSA; GuidePoint pays 100% of employee premiums and 75% of family premiums
HSA contributions of $850 annually per employee or $1,750 annually per family
Group Dental Insurance; GuidePoint pays 100% of employee premiums and 75% of family premiums
12 corporate holidays
Flexible Time Off (FTO) program
Healthy mobile phone and home internet allowance
Eligibility for retirement plan after 2 months at open enrollment
Pet Benefit Option
Mentorship and guidance opportunities