{"id":3983761,"url":"https://alion.io/job/guidepoint-security-senior-technical-data-security-architect-remote-anywhere-in-the-u-s-","title":"Senior Technical Data Security Architect- Remote (Anywhere in the U.S.)","company":{"id":3625,"name":"GuidePoint Security","domain":"guidepointsecurity.com","url":"https://alion.io/company/guidepoint-security","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":76,"open_postings":24,"ghost_share":0,"stale_share":0.958,"repost_share":0,"time_to_fill_p50_days":27,"computed_at":"2026-11-12T10:38:37Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":null,"experience_years_min":7,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Azure Data Factory","optional":false},{"name":"Azure SQL Database","optional":false},{"name":"Databricks","optional":false},{"name":"Delta Lake","optional":false},{"name":"Feature Store","optional":false},{"name":"GCP","optional":false},{"name":"GDPR","optional":false},{"name":"HIPAA","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Defender for Cloud","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Microsoft Fabric","optional":false},{"name":"MLFlow","optional":false},{"name":"PCI DSS","optional":false},{"name":"PowerShell","optional":false},{"name":"pySpark","optional":false},{"name":"Python","optional":false},{"name":"Snowflake","optional":false},{"name":"SOC 2","optional":false},{"name":"SQL","optional":false},{"name":"Terraform","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Vault","optional":false},{"name":"Zero Trust","optional":false},{"name":"Amazon S3","optional":true},{"name":"Anomaly Detection","optional":true},{"name":"Azure Cosmos DB","optional":true},{"name":"Azure DevOps","optional":true},{"name":"Bicep","optional":true},{"name":"GitHub Actions","optional":true},{"name":"Google BigQuery","optional":true},{"name":"IAM","optional":true},{"name":"ISO 27001","optional":true},{"name":"Microsoft Sentinel","optional":true},{"name":"NIST CSF","optional":true},{"name":"Power BI","optional":true},{"name":"SIEM","optional":true},{"name":"Spark","optional":true}],"status":"live","first_seen_at":"2026-11-09T17:03:37Z","employer_posted_date":"2026-11-09","last_verified_at":"2026-11-14T01:23:46Z","board_verified":true,"closed_at":null,"days_open":4,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":4},"description":"GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. By taking a three-tiered, holistic approach for evaluating security posture and ecosystems, GuidePoint enables some of the nation’s top organizations, such as Fortune 500 companies and U.S. government agencies, to identify threats, optimize resources and integrate best-fit solutions that mitigate risk.\nGeneral Description \nGuidePoint Security is seeking an experienced and strategic Senior Technical Data Security Architect to join our growing data platform team. In this highly visible role, you will be responsible for designing, implementing, and governing enterprise-grade data security frameworks across the Microsoft data ecosystem and Databricks lakehouse platform. You will serve as the authoritative technical expert on data protection, privacy, access governance, and compliance, partnering closely with engineering, architecture, and business stakeholders to embed security by design at every layer of the data stack.\nAbout the Cloud Practice\nThe Cloud Practice is responsible for providing advisory services as well as secure implementations specific to security tooling with the intent of protecting the customers' identities, endpoints, data, applications, and cloud infrastructure by designing, deploying, and operationalizing Cloud Solution Providers native security solutions. We focus specifically on ensuring cloud security, data security, identity and access management, as well as threat protection has been implemented following best practices across the organization.\nOur team of Microsoft specialists focus on deploying Microsoft security, compliance, and identity solutions to protect identities, devices, data, apps, and infrastructure. We partner with other Cloud Solution Provider teams as well as internal resources to ensure the overall goals of the clients are achieved and align with industry standards and best practices.\nRoles and Responsibilities: \nData Security Architecture & Strategy\nDesign and maintain end-to-end data security architecture across Microsoft Azure, Microsoft Fabric, Azure Synapse Analytics, Azure Data Lake Storage (ADLS Gen2), and Databricks Lakehouse Platform.\nDefine and enforce enterprise data classification, labeling, and handling standards aligned with Microsoft Purview Information Protection.\nDevelop reference architectures and security blueprints for data ingestion, transformation, storage, and consumption layers.\nLead threat modeling sessions for data pipelines and analytics workloads, identifying and mitigating risks proactively.\nEstablish a Zero Trust data security model across all data platforms and integration points.\nMicrosoft Data Technologies - Security Focus\nArchitect and govern data security controls within Microsoft Fabric, including workspace-level and item-level permissions, sensitivity labels, and OneLake security.\nDesign role-based access control (RBAC) and attribute-based access control (ABAC) strategies across Azure Data Factory, Azure Synapse, Azure Databricks, and Azure SQL.\nImplement and operationalize Microsoft Purview for data catalog governance, data lineage, and automated sensitivity classification across hybrid and multi-cloud data estates.\nConfigure and manage Azure Private Endpoints, VNet integration, and network security groups for data services to eliminate public exposure.\nOversee encryption strategies including Azure Key Vault integration, customer-managed keys (CMK), and data-at-rest / data-in-transit encryption standards.\nPartner with identity teams to enforce Entra ID Conditional Access policies, Privileged Identity Management (PIM), and managed identities for data service authentication.\nLead the implementation and tuning of Microsoft Defender for Cloud data security posture management (DSPM) capabilities.\nDatabricks Security Architecture\nArchitect and implement Unity Catalog as the enterprise-wide data governance layer across Databricks workspaces, including metastore design, catalog/schema/table-level permissions, and row/column-level security.\nDesign Databricks workspace security including network isolation (no-public-IP, vNet injection, private link), cluster policies, and IP access lists.\nDefine and enforce Databricks credential passthrough, service principal governance, and OAuth integration with Azure Entra ID.\nImplement dynamic data masking and column-level security policies within Unity Catalog to protect PII, PHI, and sensitive financial data.\nEstablish Delta Lake security patterns including table ACLs, fine-grained access control, and audit logging strategies via Databricks system tables.\nOversee the security of Databricks workflows, notebooks, and job clusters, including secrets management integration with Azure Key Vault-backed secret scopes.\nConduct security reviews of MLflow models and Feature Store configurations to address data leakage risks in ML pipelines.\nCompliance, Audit & Risk Management\nEnsure data platform compliance with relevant regulatory frameworks including GDPR, CCPA, HIPAA, SOC 2 Type II, and PCI-DSS where applicable.\nDesign and maintain audit trail and data access logging architectures across Microsoft and Databricks platforms.\nConduct regular security risk assessments, gap analyses, and maturity evaluations of the data security program.\nDevelop and maintain security runbooks, policies, and standards documentation for data platform operations.\nCoordinate with legal, compliance, and privacy teams to respond to data subject access requests (DSARs) and regulatory inquiries.\nCross-Functional Collaboration & Leadership\nServe as the primary security advisor to data engineering, analytics engineering, and BI teams throughout the development lifecycle.\nLead security architecture review boards for new data initiatives, third-party data integrations, and major platform changes.\nDevelop and lead a structured mentoring program for junior and mid-level engineers and architects, providing one-on-one coaching, career guidance, and skills development roadmaps tailored to each individual’s growth goals.\nConduct regular knowledge-sharing sessions, lunch-and-learns, and internal workshops to upskill teams on evolving data security threats, tooling, and compliance requirements across the Microsoft and Databricks ecosystems.\nPartner with engineering managers and HR to define data security competency frameworks, leveling guides, and certification pathways that support talent development and retention across the data platform organization.\nEstablish and maintain a community of practice around data security, fostering peer learning, documentation culture, and cross-team collaboration on shared security challenges and architectural patterns.\nCollaborate with SecOps and SOC teams to build data-specific detection rules, incident response playbooks, and forensic investigation capabilities.\nPresent security posture, risk findings, and remediation roadmaps to executive leadership and board-level stakeholders.\nRequired Experience and Education: \n7+ years of experience in data engineering, data architecture, or information security, with at least 7 years focused on data security architecture OR Bachelor’s Degree and 3+ years of experience in data engineering, data architecture, or information security, with at least 3 years focused on data security architecture.\nDeep hands-on expertise with Microsoft Azure data services: Azure Data Lake Storage Gen2, Azure Synapse Analytics, Azure Data Factory, Azure SQL Database, and Microsoft Fabric.\nDemonstrated expertise in designing and implementing Databricks Unity Catalog, including workspace federation, metastore design, and fine-grained access control.\nStrong proficiency with Microsoft Purview, including data map configuration, classification rules, sensitivity labels, and policy enforcement.\nExpert-level knowledge of Azure identity and access management: Entra ID, Managed Identities, Conditional Access, PIM, and service principal governance.\nHands-on experience with Azure Key Vault, customer-managed encryption keys, and secrets management integration with data platforms.\nSolid understanding of data governance frameworks and data security principles including Zero Trust, least privilege, and data minimization.\nExperience with regulatory compliance programs (GDPR, CCPA, HIPAA, SOC 2, PCI-DSS) as applied to data platforms.\nProficiency in SQL and at least one programming/scripting language (Python, PySpark, PowerShell, or Terraform) used for security automation.\nStrong written and verbal communication skills with the ability to articulate complex security concepts to technical and non-technical audiences.\nDemonstrated experience securing data workloads across multi-cloud environments (Azure, AWS, and/or GCP), including cross-cloud data governance, identity federation, and consistent enforcement of security policies across heterogeneous cloud estates.\nHands-on experience with Snowflake data security, including Snowflake RBAC/DAC models, column-level and row-level security policies, dynamic data masking, network policies, Private Link configuration, and Snowflake Data Sharing governance controls.\nProven ability to support presales activities, including leading technical discovery sessions, contributing to RFP/RFI responses, delivering solution demonstrations, and authoring security architecture sections of client-facing proposals and statements of work.\nEmbraces emerging technologies, including AI tools, to work smarter, solve problems, and drive better business outcomes.\nPreferred Experience and Education:\nActive certifications: Microsoft Certified: Azure Security Engineer Associate (AZ-500), Microsoft Certified: Azure Data Engineer Associate (DP-203), Databricks Certified Data Engineer Professional, or equivalent CISSP / CISM.\nExperience with Microsoft Sentinel for SIEM integration with data platform audit logs and anomaly detection.\nFamiliarity with Databricks Delta Sharing, Cleanroom, and cross-cloud governance patterns.\nExperience with infrastructure-as-code (Terraform, Bicep) for automated, policy-compliant data platform deployments.\nBackground in data mesh or federated data governance operating models.\nExposure to AI/ML security considerations including model governance, training data security, and responsible AI frameworks within Azure ML or Databricks.\nExperience in financial services, healthcare, or other highly regulated industries.\nTechnical Skills Summary:\n\nCategory\n\nTechnologies & Tools\n\nMicrosoft Data Platform\n\nMicrosoft Fabric, Azure Synapse Analytics, Azure Data Lake Storage Gen2, Azure Data Factory, Azure SQL, Azure Cosmos DB, Power BI\n\nDatabricks\n\nUnity Catalog, Delta Lake, Databricks Workflows, MLflow, Feature Store, Databricks SQL, PySpark\n\nSnowflake & Multi-Cloud\n\nSnowflake RBAC/DAC, Dynamic Data Masking, Row-Level Security, Network Policies, Private Link, Data Sharing Governance, AWS (S3 Security, IAM, Lake Formation), GCP (BigQuery Security, IAM, VPC Controls)\n\nSecurity & Governance\n\nMicrosoft Purview, Microsoft Defender for Cloud, Azure Key Vault, Entra ID, Conditional Access, PIM\n\nNetworking & Isolation\n\nAzure Private Link, VNet Integration, Network Security Groups, Databricks VNet Injection, IP Access Lists\n\nIaC & Automation\n\nTerraform, Azure Bicep, ARM Templates, PowerShell, Azure DevOps, GitHub Actions\n\nCompliance Frameworks\n\nGDPR, CCPA, HIPAA, SOC 2, PCI-DSS, NIST CSF, ISO 27001\n\nMonitoring & SIEM\n\nMicrosoft Sentinel, Azure Monitor, Databricks System Tables, Log Analytics Workspace\n\nTravel Requirements:\nUp to 10% travel\nPhysical Requirements:\nSedentary work\nSubstantial movement of the wrists, hands, and/or fingers for a minimum of 8 hours a day\nRequired to have close visual acuity to view computer terminal and/or extensive reading for a minimum of 8 hours a day\n\nWe use Greenhouse Software as our applicant tracking system and Zoom Scheduler for HR screen request scheduling. At times, your emai...","description_format":"text","description_chars":13898,"description_truncated":true,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Dental insurance","Flexible time off","Health insurance","Retirement plans"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security","Managed Security","IT Resellers & VARs"],"lifecycle":[{"event":"open","at":"2026-11-09T20:52:29Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 4 · green card filings: 3","filings_12m":4,"filings_prev_12m":12,"green_card_filings_12m":3,"median_offered_wage_usd":126786,"route":null,"cap_exempt":false,"checked_at":"2026-11-12T07:36:15+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":4}],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":2,"expected_fill_days":27,"reasons":["conf:5","stale_co","velocity","win:early"],"computed_at":"2026-11-12T10:38:37Z"},"pay":null,"html_url":"https://alion.io/job/guidepoint-security-senior-technical-data-security-architect-remote-anywhere-in-the-u-s-","json_url":"https://alion.io/job/guidepoint-security-senior-technical-data-security-architect-remote-anywhere-in-the-u-s-.json","meta":{"generated_at":"2026-11-14T02:58:02Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4243,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3625},"rest":"https://alion.io/mcp/rest/get_company?id=3625"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fguidepoint-security-senior-technical-data-security-architect-remote-anywhere-in-the-u-s-"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fguidepoint-security-senior-technical-data-security-architect-remote-anywhere-in-the-u-s-"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fguidepoint-security-senior-technical-data-security-architect-remote-anywhere-in-the-u-s-"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/guidepoint-security-senior-technical-data-security-architect-remote-anywhere-in-the-u-s-\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fguidepoint-security-senior-technical-data-security-architect-remote-anywhere-in-the-u-s-"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3983761}},{"tool":"search_jobs","arguments":{"company":"guidepointsecurity.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3983761},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}