LEAD DATA SECURITY SOLUTION ENGINEER

LEAD DATA SECURITY SOLUTION ENGINEER

Experience: 10+ Years

Location: Remote

Employment Type: Full-Time

Budget: Up to ₹35 LPA

Time Zone: US Eastern Time (ET)

Shift: US ET Night Shift

Job Description

We are looking for an experienced Lead Data Security Solution Engineer with strong expertise in database security, IAM, authentication, authorization, and enterprise data architecture.

The candidate will be responsible for assessing existing database environments, designing secure data access architectures, implementing fine-grained authorization controls, and ensuring licensed data is protected throughout its lifecycle.

The role involves working closely with database, IAM, security, infrastructure, application, data platform, and governance teams.

Key Responsibilities

1. Technical and Database Assessment

• Assess database platforms, schemas, data flows, data lineage, connectivity, and downstream dependencies.
• Review where licensed data is stored, transformed, replicated, extracted, cached, archived, and backed up.
• Evaluate existing database security capabilities and identify gaps, risks, and technical constraints.

2. Authentication and Identity Integration

• Design secure authentication for users, applications, service identities, and workloads.
• Implement or evaluate OAuth 2.0, OIDC, token-based authentication, and enterprise IAM integration.
• Integrate enterprise identities, security groups, database roles, and policy engines.
• Reduce dependency on shared and long-lived credentials.

3. Fine-Grained Authorization and Data Security

• Design and implement database-level access controls.
• Implement Row-Level Security (RLS), Column-Level Security (CLS), dynamic data masking, and policy-based filtering.
• Design secure isolation patterns for licensed datasets.
• Ensure security policies are enforced at the database layer.

4. Auditing, Monitoring, and Traceability

• Design database auditing and activity monitoring.
• Track user access, queries, exports, permission changes, and privileged activities.
• Integrate audit logs with centralized monitoring and reporting systems.
• Define audit retention and investigation requirements.

5. Data Lifecycle and Deletion

• Design access revocation mechanisms for users, projects, and expired licensing agreements.
• Define secure data deletion processes across databases, backups, archives, caches, and downstream systems.
• Ensure deletion activities are validated and supported by audit evidence.

6. Solution Architecture and Engineering

• Develop current-state and target-state security architectures.
• Prepare technical specifications, implementation plans, and reusable security patterns.
• Evaluate solution options based on security, scalability, performance, feasibility, and cost.
• Collaborate with cross-functional technical and business teams.

7. POC Design and Execution

• Design and execute Proof of Concepts (POCs) for database security scenarios.
• Validate authentication, authorization, data isolation, auditing, access revocation, and deletion.
• Document test results, technical limitations, recommendations, and implementation approaches.

Required Technical Skills

• 10+ years of experience in database engineering, data security, solution architecture, or related fields.
• Strong hands-on experience with relational databases, SQL, database architecture, schemas, roles, and privileges.
• Experience implementing Row-Level Security (RLS), Column-Level Security (CLS), dynamic masking, and fine-grained authorization.
• Strong understanding of IAM, OAuth 2.0, OIDC, token-based authentication, service identities, and workload identities.
• Experience with secrets management and secure database connectivity.
• Knowledge of database auditing, query monitoring, centralized logging, alerting, and security investigations.
• Experience securing integrations involving applications, APIs, analytical tools, and ETL/ELT pipelines.
• Understanding of data lineage, retention, lifecycle management, revocation, deletion, backup, and recovery.
• Ability to assess heterogeneous database platforms and recommend suitable security architectures.
• Strong architecture, troubleshooting, documentation, and stakeholder-management skills.

Nice to Have

• Experience with enterprise data platforms and cloud or hybrid database environments.
• Knowledge of data catalogs, access governance, and policy-enforcement technologies.
• Experience in pharmaceutical research, healthcare, scientific data, or intellectual property protection.
• Exposure to data licensing, contractual-use restrictions, and regulated environments.
• Experience designing and executing security POCs and implementing production-ready solutions.

Expected Deliverables

• Database security and capability assessment.
• Current-state and target-state security architecture.
• Database authentication and IAM integration design.
• Fine-grained authorization and data-masking design.
• Data firewalling and licensed-dataset isolation patterns.
• Audit, monitoring, and traceability framework.
• Data revocation, retention, and deletion strategy.
• Technical feasibility, gap, dependency, and risk assessments.
• POC implementation, test results, and recommendations.
• Reusable technical documentation and operational handover.

Work Requirements

• Fully remote opportunity.
• Full-time employment.
• Must be comfortable working in the US Eastern Time (ET) night shift.
• Budget: Up to ₹35 LPA.

Skills

Database security, SQL, IAM, OAuth 2.0, OIDC, Data masking