Data Governance Engineer

Northrop Grumman

. Lead the design and implementation of RBAC and ABAC within Databricks Unity Catalog, including data structures, access models, and tagging standards .

Posted 9/23/2026full-timeFalls Church • Virginia • United StatesSeniorLead💰 $142,200 - $213,200 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in designing and implementing RBAC and ABAC models within Databricks Unity Catalog, focusing on data access security and compliance. Proficient in applying infrastructure-as-code practices using Terraform and developing identity governance strategies.

Highest-signal resume keywords

RBAC ImplementationABAC ImplementationDatabricks Unity CatalogTerraformPython

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Data Platform SecuritySecurity AutomationDynamic ViewsRow-Level SecurityColumn MaskingIdentity GovernanceService PrincipalsSQLInfrastructure-as-CodeData Classification Standards

Tools & Technologies

DatabricksTerraformEntra ID

Industry Keywords

Compliance RequirementsData Access StrategyAccess ControlsData Access ManagementGovernment Security Clearance

Tech Stack

Tools & technologies

PythonSQLTerraformUnity

About the role

Key responsibilities & impact

Lead the design and implementation of RBAC and ABAC within Databricks Unity Catalog, including data structures, access models, and tagging standards
Define security architecture for data access, including dynamic views, row-level security, and column masking
Develop the identity governance approach for Databricks, including service principals, workload identities, and enterprise identity-provider integration
Translate regulatory, contractual, and compliance requirements into technical controls
Establish and maintain data classification standards and tagging structures
Implement grants, catalogs, tags, and access controls as code using Terraform and/or Databricks Asset Bundles
Work with workspace administrators and platform engineers to align workspace, compute, secrets, and network controls with the broader data access strategy
Create guardrails, templates, and workflows enabling secure data-access management by data engineers
Serve as senior technical owner of the Databricks data access control model
Build the Databricks security function and collaborate with data engineering, platform engineering, and enterprise stakeholders

Requirements

What you’ll need

Bachelor's degree in a relevant discipline and at least 8 years as a Software Engineer or Data Engineer with a heavy focus on data platform security and security automation; or Master's degree and at least 6 years of relevant experience
At least 2 years of hands-on experience implementing Databricks Unity Catalog security features
Experience designing and implementing RBAC and ABAC models at scale
Hands-on experience with Databricks Unity Catalog, grants, dynamic views, row- and column-level filtering and masking
Fluency with identity and federation patterns including SCIM, service principals, and integration with enterprise identity providers such as Entra ID
Experience applying infrastructure-as-code practices, preferably Terraform, to access, tagging, and policy management in Databricks
Proficiency in Python and SQL for automation, monitoring, and compliance
Ability to obtain a government security clearance
U.S. Citizenship is required for positions with a government clearance and certain other restricted positions
Preferred: Master's degree
Preferred: Working onsite full time in Falls Church, VA

Benefits

Comp & perks

Overtime eligibility, depending on position
Shift differential, depending on position
Discretionary bonus
Health insurance coverage
Life and disability insurance
Savings plan
Company-paid holidays
Paid time off (PTO) for vacation and/or personal business
Fulltime telework allowed
Equal Opportunity Employer