Databricks Cloud Security

About the role

We are looking for an experienced Databricks Cloud Security Engineer responsible for designing, implementing, and maintaining security controls within the Databricks environment and its underlying cloud infrastructure. The ideal candidate should have strong knowledge of cloud security, data protection, identity and access management, and Databricks security architecture. This role will ensure that data platforms, workloads, and integrations are protected against security threats while maintaining compliance with organizational policies and industry standards.

Generic responsibilities:

• Design, implement, and maintain security controls within the Databricks environment

• Configure and manage identity and access management (IAM), role-based access control (RBAC), and user permissions

• Implement and manage Databricks Unity Catalog for data governance, access control, and data security

• Secure data pipelines, workspaces, clusters, notebooks, and other Databricks resources

• Implement data encryption, secrets management, and secure authentication mechanisms

• Manage cloud security configurations across AWS, Microsoft Azure, or Google Cloud Platform

• Monitor security logs, identify vulnerabilities, investigate security incidents, and implement remediation measures

• Ensure compliance with security standards, data privacy requirements, and internal governance policies

• Collaborate with Data Engineers, Cloud Engineers, DevOps Engineers, and Security teams to implement secure data solutions

• Conduct security assessments, risk analysis, and periodic reviews of Databricks environments

Qualifications:

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field

• At least 5 years of experience in Cloud Security, Data Security, or Infrastructure Security

• Hands-on experience with Databricks security administration and configuration

• Strong understanding of Databricks architecture, workspaces, clusters, and Unity Catalog

• Experience with Identity and Access Management (IAM), RBAC, SSO, and authentication protocols

• Knowledge of cloud security services and configurations in AWS, Azure, or GCP

• Experience implementing encryption, key management, and secrets management

• Familiarity with network security, firewalls, private connectivity, and secure data access

• Knowledge of security monitoring, vulnerability management, and incident response

• Understanding of data governance, privacy, and regulatory compliance requirements