Databricks Data Governance Engineer

Team: IT

Location: US

Commitment: Full-time

Workplace Type: remote

Accountabilities:

• Lead the design and implementation of role-based access control (RBAC) and attribute-based access control (ABAC) within Databricks Unity Catalog.
• Define scalable data access models, including data structures, permissions, tagging standards, and governance patterns.
• Design and implement security architecture using dynamic views, row-level security, column-level filtering, and data masking.
• Develop identity governance strategies for Databricks, including service principals, workload identities, SCIM, and integrations with enterprise identity providers.
• Translate regulatory, contractual, security, and compliance requirements into practical technical controls across the data platform.
• Establish and maintain data classification standards and tagging frameworks that support scalable and auditable access management.
• Implement Databricks grants, catalogs, tags, permissions, and policies as code using Terraform and/or Databricks Asset Bundles.
• Apply infrastructure-as-code practices to support version control, repeatability, automation, and audit readiness.
• Partner with workspace administrators and platform engineers to align workspace, compute, secrets, and network controls with the overall data access strategy.
• Build governance guardrails, reusable templates, and streamlined workflows that allow data engineers to manage appropriate access while maintaining strong security controls.
• Use Python and SQL to develop automation, monitoring, and compliance capabilities.
• Provide technical leadership and hands-on implementation support as the data governance and security function evolves.

Requirements

• Bachelor’s degree in a relevant discipline with at least 8 years of experience as a Software Engineer, Data Engineer, or similar technical professional focused heavily on data platform security and security automation; alternatively, a Master’s degree with at least 6 years of relevant experience.
• At least 2 years of hands-on experience implementing Databricks Unity Catalog security features.
• Demonstrated experience designing and implementing RBAC and ABAC models at scale.
• Hands-on expertise with Databricks Unity Catalog, grants, dynamic views, row-level filtering, column-level filtering, and data masking.
• Strong understanding of identity and federation patterns, including SCIM, service principals, workload identities, and enterprise identity provider integrations such as Entra ID.
• Experience applying infrastructure-as-code practices, particularly Terraform, to Databricks access controls, tagging, and policy management.
• Proficiency in Python and SQL for automation, monitoring, governance, and compliance activities.
• Strong understanding of data platform security, access governance, and scalable security architecture.
• Ability to translate complex regulatory and security requirements into clear, implementable technical controls.
• Strong collaboration and communication skills, with the ability to work effectively across data engineering, platform engineering, security, and enterprise stakeholder groups.
• Ability to obtain a government security clearance.
• A Master’s degree is preferred.
• Full-time onsite work in Falls Church, Virginia is preferred, although the role also supports full-time telework.

Benefits

• Base salary range of $142,200–$213,200 USD per year.
• Potential eligibility for overtime, shift differentials, and discretionary performance-based bonuses, depending on the position.
• Health insurance coverage.
• Life and disability insurance.
• Savings and retirement benefits.
• Company-paid holidays.
• Paid time off for vacation and/or personal business.
• Fully remote/telework option available.
• No relocation assistance is provided.
• No travel required.
• Opportunity to work on large-scale data governance, security, and cloud data platform initiatives.