Open a governed door for AI. Build an MCP service over our LookML semantic layer. AI agents authenticate as the user and inherit that user's access, with no separate back door.
Keep costs bounded. Put guardrails on AI and ad-hoc query spend using custom quotas, maximum-bytes-billed limits, slot reservations, and caching.
Design end to end. Work closely with our Senior Analytics Engineer (Semantic Layer) so security and the semantic layer fit together cleanly.
Make it auditable. Document security patterns and access procedures so the platform is easy to operate, review, and extend.
What you'll bring
Hands-on experience with fine-grained security on a cloud data warehouse: row-level and column-level security, masking, authorized views, and IAM. BigQuery is ideal, and Snowflake or Databricks experience also counts.
A solid grounding in data security and governance: role- and attribute-based access control, PII handling, and anonymization / masking.
Platform and integration engineering skills: you can build and run a service that handles authentication and passes user identity through to the data (OAuth or similar).
Strong SQL, plus enough familiarity with a semantic / BI layer (LookML or similar) to expose it safely.
Python or a comparable language for service development.
Comfort working on your own in a greenfield setting and setting patterns others follow.
Usually 8+ years in data engineering, data platform, or data security engineering, including leading at least one critical technical initiative.
Nice to have
MCP or other LLM tool-use / agent integrations; Looker API or embedding.
BigQuery cost governance.
Collibra policy automation.
Federated query engines (Trino / Starburst).
Experience with FERPA, HIPAA, or other regulated data.
Don't tick every box? Apply anyway. If you've secured sensitive data at scale and want to work out how AI should access it safely, we'd like to hear from you.
Why you'll love it
A rare greenfield problem. Secure, identity-aware AI access to governed data is still new ground, and you'll help define it.
Work that protects students. You'll safeguard data that belongs to kids and families.
Senior scope without managing people. You'll own the architecture as an individual contributor.
Shape a new team. As an early hire, your patterns become the group's patterns.
#LI-Hybrid
