Principal Solution Architect – Data Platform Security

🔥 0 minutes ago

🇺🇸 United States – Remote

⏰ Full Time

🔴 Lead

💻 Solutions Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

phData

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2014

🤖 Artificial Intelligence

☁️ SaaS

🏢 Enterprise

💰 $2.5M Seed Round on 2018-03

Artificial Intelligence • SaaS • Enterprise

phData is a company specializing in providing data engineering, analytics, and cloud migration solutions. They offer services including AI and machine learning strategies, analytics and visualization, and elastic operations to help businesses build and operationalize modern data products and applications. phData is an elite partner of Snowflake and provides end-to-end consulting for developing modern data applications and processing vast datasets efficiently. They cater to industries such as healthcare, financial services, and manufacturing by optimizing data platforms and delivering actionable insights using cutting-edge technology and expertise.

📋 Description

• Lead the architecture, hardening, and continuous security improvement of enterprise Snowflake platforms across complex, security-sensitive client environments, ensuring strong controls, resilience, and long-term maintainability. • Translate business, security, and technical requirements into operating models, roadmaps, and engineering work that strengthen platform controls, access patterns, governance, and secure delivery practices. • Design and lead proactive monitoring, alerting, and threat detection across Snowflake environments using native audit and telemetry data, integrating with SIEM or similar platforms to detect, investigate, and remediate anomalous or unauthorized activity. • Use threat modeling and attack-path analysis to identify and remediate risk across access models, data sharing, network controls, identity posture, third-party integrations, service accounts, secrets management, and configuration drift. • Guide architectural and operational decisions across governance, authentication, privileged access, network security, and data protection, balancing platform risk, business priorities, compliance requirements, and performance goals. • Serve as a trusted advisor and senior technical leader across client stakeholders, internal engineers, and partner teams, clearly communicating trade-offs, platform risks, and remediation plans while guiding difficult decisions in complex environments. • Contribute to and improve managed services standards by creating automation, runbooks, accelerators, and best practices that enhance the quality, consistency, and scalability of secure Snowflake operations. • Lead cross-functional teams and mentor engineers while helping mature phData’s secure managed services delivery model.

🎯 Requirements

• 15+ years of experience in cloud and data infrastructure, including significant experience in security engineering, platform security, or security operations roles. • Significant production experience with Snowflake, including platform architecture, administration, security design, and operational governance in complex enterprise environments. • Deep expertise in Snowflake platform security, including role-based access control, managed access, secure data sharing, account guardrails, privileged access controls, governance patterns, and data protection controls such as masking and row- or column-level access. • Hands-on experience with Snowflake audit and telemetry data, including sources such as ACCOUNT_USAGE views like ACCESS_HISTORY, QUERY_HISTORY, LOGIN_HISTORY, and POLICY_EVENTS, for investigation, anomaly detection, and control validation. • Experience integrating Snowflake audit logs, platform logs, and security events into SIEM or similar monitoring platforms such as Splunk, Microsoft Sentinel, CrowdStrike, or Datadog, including designing log pipelines, detection rules, escalation workflows, and remediation processes. • Strong technical depth across network, identity, authentication, secrets management, and service account lifecycle controls relevant to Snowflake and cloud data platforms, including private endpoints, VPC or VNet peering, PrivateLink, IP allowlisting, MFA, SSO or SAML, OAuth token scoping, key pair authentication, and credential rotation policies. • Hands-on experience with secrets managers and related tooling such as AWS Secrets Manager, HashiCorp Vault, or Azure Key Vault. • Strong working experience with SQL, Infrastructure as Code, Python automation, and CI/CD to support secure platform delivery and repeatable operational controls. • Experience delivering managed services or consulting engagements in complex enterprise environments, with the ability to break down multifaceted platform and security challenges into structured, actionable work. • Bachelor’s degree in Computer Science, Engineering, or a related field, or equivalent practical experience.

🏖️ Benefits

• Remote-First Work Environment • 401k plan with company match • Dental and Vision insurance • Home Office Equipment Stipend • Annual stipend for Learning and Development • Competitive compensation, excellent benefits, 4 weeks PTO, plus 10 holidays and additional perks