What You Will Do
Own end-to-end security architecture. Define and implement the security architecture for Databricks across the platform, from identity through data protection.
Manage identity and access. Own SSO/MFA integration and RBAC/ABAC access models, and establish access governance processes across accounts and workspaces.
Secure Unity Catalog. Design and enforce Unity Catalog security, data classification, and fine-grained access controls (row, column, and attribute level).
Secure Delta Sharing and open sharing. Ensure only approved data is exposed across cross-account and open sharing, with reliable, measurable revocation.
Design least privilege and blast-radius containment. Establish the lowest practical access boundary, preventing access to adjacent business-unit data and storage.
Control privileged access and configuration drift. Govern privileged elevation and break-glass access, and detect unauthorized changes with monitored alert latency and remediation.
Protect data and secrets. Establish controls for encryption, secrets management, and network security aligned to relevant regulatory compliance requirements.
Build guardrails and auditability. Set up security guardrails, auditability, and access governance so the platform stays compliant and controllable as it scales.
Provide cross-account technical leadership. Act as a go-to security reviewer across multiple accounts, contributing to design reviews and resolving access and governance issues that individual delivery teams cannot.
What You Bring (Required)
Hands-on experience designing and implementing security for enterprise Databricks environments.
Deep Unity Catalog security experience: RBAC/ABAC, fine-grained (row/column/attribute) access, data classification, and Delta Sharing / open sharing controls.
Least-privilege and blast-radius design across business units, containing access to adjacent data and storage.
Privileged access management experience: controlled elevation, break-glass, configuration-drift detection, and remediation.
Strong identity and access management background: SSO/MFA integration and access governance.
Expertise in encryption, secrets management, and network security on at least one major cloud (AWS, Azure, or GCP).
Working knowledge of regulatory compliance requirements relevant to data platforms.
Ability to design and run proof-of-control tests and quantify outcomes (e.g., revocation time, data exposure, drift-detection and alert latency), not just implement.
Nice to Have (Preferred)
Databricks Cloud Platform Architect accreditation (AWS, Azure, or GCP) or Databricks Platform Administrator.
Recognized cloud security certification (e.g., AWS or Azure security specialty, or CISSP). Note that Databricks has no standalone security certification, so security credentials come from the cloud provider or an industry body.
Multi-cloud experience across two or more of AWS, Azure, and GCP.
Regulated-industry experience (financial services, healthcare, or similar).
What This Role Is Not
This is a Databricks-native security and access architect role. It is not a general enterprise or datacenter security role. The right candidate has genuinely designed and implemented access, governance, and data-protection controls inside Databricks environments, distinct from a generalist security engineer without hands-on Databricks depth.
Qualifications
Bachelors - Business Analytics, Bachelors - Computer Science, Bachelors - Statistics, Masters - Data Science
Certifications Certified Data Management Professional - RiversandRiversand, Databricks Certified Associate Developer for Apache Spark 3.0 - Databricks AcademyDatabricks Academy, Databricks Certified Associate Developer for Apache Spark - Databricks AcademyDatabricks Academy, Microsoft Certified: Azure Data Engineer Associate - MicrosoftMicrosoft, Oracle Database 12c Certified Implementation Specialist - OracleOracle
Required Skills Accounts Payable Process, Accounts Payable Process, Accounts Receivable (AR), Aerospace Manufacturing, Agile Methodology, Automotive Manufacturing, Banking Capital Markets, Change Management, Claims Management, Client Relations, Cloud Computing, Collaboration Tools, Computer Vision, Consumer Electronics, Consumer Packaged Goods (CPG), Databricks Platform, Data Engineering, Design Thinking, Electronic Hardware, Entertainment Journalism, Executive Presence, Healthcare Payors, Inclusion, Industrial Manufacturing Processes, Information Security {+ 26 more}
- Language
- English (Required)
- Language Proficiency -
- Proficient - C2
Additional Job Location -
- Master Skill List -
- Data Engineering
- Work Shift -
- Flex Time (India)
Why join Genpact?
Lead AI-powered transformation – Drive innovation and solve real-world business challenges that matter
Make an impact – Help global enterprises solve business challenges that matter
Accelerate your career – Gain hands-on experience, mentorship, and world-class learning opportunities to stay ahead
Work with the best – Join 140,000+ bold thinkers and problem-solvers who push boundaries every day
Thrive in a values-driven culture – Our courage, curiosity, and incisiveness - built on a foundation of integrity and inclusion - allow your ideas to fuel progress
Come join the 140,000+ coders, tech shapers, and growth makers at Genpact and take your career in the only direction that matters: Up.
Let’s build tomorrow together.
Genpact is an Equal Opportunity Employer and considers applicants for all positions without regard to race, color, religion or belief, sex, age, national origin, citizenship status, marital status, military/veteran status, genetic information, sexual orientation, gender identity, physical or mental disability or any other characteristic protected by applicable laws. Genpact is committed to creating a dynamic work environment that values respect and integrity, customer focus, and innovation.
Furthermore, please do note that Genpact does not charge fees to process job applications and applicants are not required to pay to participate in our hiring process in any other way. Examples of such scams include purchasing a 'starter kit,' paying to apply, or purchasing equipment or training.
