Databricks Data Governance Engineer

Accountabilities:: Lead the design and implementation of role-based access control (RBAC) and attribute-based access control (ABAC) within Databricks Unity Catalog. Define scalable data access models, including data structures, permissions, tagging standards, and governance patterns. Design and implement security architecture using dynamic views, row-level security, column-level filtering, and data masking. Develop identity governance strategies for Databricks, including service principals, workload identities, SCIM, and integrations with enterprise identity providers. Translate regulatory, contractual, security, and compliance requirements into practical technical controls across the data platform. Establish and maintain data classification standards and tagging frameworks that support scalable and auditable access management. Implement Databricks grants, catalogs, tags, permissions, and policies as code using Terraform and/or Databricks Asset Bundles. Apply infrastructure-as-code practices to support version control, repeatability, automation, and audit readiness. Partner with workspace administrators and platform engineers to align workspace, compute, secrets, and network controls with the overall data access strategy. Build governance guardrails, reusable templates, and streamlined workflows that allow data engineers to manage appropriate access while maintaining strong security controls. Use Python and SQL to develop automation, monitoring, and compliance capabilities. Provide technical leadership and hands-on implementation support as the data governance and security function evolves. Requirements Bachelor’s degree in a relevant discipline with at least 8 years of experience as a Software Engineer, Data Engineer, or similar technical professional focused heavily on data platform security and security automation; alternatively, a Master’s degree with at least 6 years of relevant experience. At least 2 years of hands-on experience implementing Databricks Unity Catalog security features. Demonstrated experience designing and implementing RBAC and ABAC models at scale. Hands-on expertise with Databricks Unity Catalog, grants, dynamic views, row-level filtering, column-level filtering, and data masking. Strong understanding of identity and federation patterns, including SCIM, service principals, workload identities, and enterprise identity provider integrations such as Entra ID. Experience applying infrastructure-as-code practices, particularly Terraform, to Databricks access controls, tagging, and policy management. Proficiency in Python and SQL for automation, monitoring, governance, and compliance activities. Strong understanding of data platform security, access governance, and scalable security architecture. Ability to translate complex regulatory and security requirements into clear, implementable technical controls. Strong collaboration and communication skills, with the ability to work effectively across data engineering, platform engineering, security, and enterprise stakeholder groups. Ability to obtain a government security clearance. A Master’s degree is preferred. Full-time onsite work in Falls Church, Virginia is preferred, although the role also supports full-time telework. Benefits Base salary range of $142,200–$213,200 USD per year. Potential eligibility for overtime, shift differentials, and discretionary performance-based bonuses, depending on the position. Health insurance coverage. Life and disability insurance. Savings and retirement benefits. Company-paid holidays. Paid time off for vacation and/or personal business. Fully remote/telework option available. No relocation assistance is provided. No travel required. Opportunity to work on large-scale data governance, security, and cloud data platform initiatives.