Databricks Security & Access Architect 4D

Overview

Define and implement the end-to-end security architecture for Databricks on a major cloud (AWS, Azure, or GCP), owning the access, governance, and data-protection model across the platform as a hands-on cross-account security authority.

What you'll do

• Define and implement the security architecture for Databricks across the platform, from identity through data protection.
• Own SSO/MFA integration and RBAC/ABAC access models, and establish access governance processes across accounts and workspaces.
• Design and enforce Unity Catalog security, data classification, and fine-grained access controls (row, column, and attribute level).
• Ensure only approved data is exposed across cross-account and open sharing, with reliable, measurable revocation.
• Establish the lowest practical access boundary, preventing access to adjacent business-unit data and storage.
• Govern privileged elevation and break-glass access, and detect unauthorized changes with monitored alert latency and remediation.
• Establish controls for encryption, secrets management, and network security aligned to relevant regulatory compliance requirements.
• Set up security guardrails, auditability, and access governance so the platform stays compliant and controllable as it scales.
• Act as a go-to security reviewer across multiple accounts, contributing to design reviews and resolving access and governance issues that individual delivery teams cannot.

What you'll need

• Hands-on experience designing and implementing security for enterprise Databricks environments.
• Deep Unity Catalog security experience: RBAC/ABAC, fine-grained (row/column/attribute) access, data classification, and Delta Sharing / open sharing controls.
• Least-privilege and blast-radius design across business units, containing access to adjacent data and storage.
• Privileged access management experience: controlled elevation, break-glass, configuration-drift detection, and remediation.
• Strong identity and access management background: SSO/MFA integration and access governance.
• Expertise in encryption, secrets management, and network security on at least one major cloud (AWS, Azure, or GCP).
• Working knowledge of regulatory compliance requirements relevant to data platforms.
• Ability to design and run proof-of-control tests and quantify outcomes (e.g., revocation time, data exposure, drift-detection and alert latency), not just implement.

Nice to have

• Databricks Cloud Platform Architect accreditation (AWS, Azure, or GCP) or Databricks Platform Administrator.
• Recognized cloud security certification (e.g., AWS or Azure security specialty, or CISSP).
• Multi-cloud experience across two or more of AWS, Azure, and GCP.
• Regulated-industry experience (financial services, healthcare, or similar).

Details

• Location: Hyderabad, India (Uppal, STPI).
• Work mode: Hybrid.
• Work shift: Flex Time (India).
• Job type: Regular.
• Language: English (Required), Proficient C2.