Databricks Unity Catalog Admin

Canadian-Tire-Corporation,-Ltd.-1; Toronto; Hybrid; CAD 64,000 - 106,000; Full time

Benefits offered by this job

Comprehensive benefits

Retirement program

Continuing Education

Employee discounts

Job summary

Canadian Tire Corporation, Limited is hiring a Unity Catalog Administrator in Toronto. You will design and automate enterprise-grade data governance, standardize assets, and securely catalog data with Entra ID integration across multi-workspace Databricks deployments.

You’ll enforce RBAC/ABAC, implement RLS and masking, configure Delta Sharing, and drive CI/CD GitOps for catalog provisioning and compliance across environments. This role is hybrid in Toronto with competitive benefits.

Qualifications

• Deep architectural expertise in Unity Catalog, Delta Lake, Delta Sharing, and system tables.
• Experience with RBAC/ABAC, RLS, and data masking for PII/PHI datasets.
• Proficiency with Terraform-based automation and GitOps workflows.

Responsibilities

• Design, automate, and maintain Unity Catalog governance across multi-workspace environments.
• Implement and enforce RBAC/ABAC, RLS, and data masking to protect sensitive data.
• Configure Delta Sharing, audit trails, and cross-cloud data sharing policies.
• Monitor Unity Catalog system tables for lineage, access, and compliance.
• Lead CI/CD GitOps pipelines for catalog provisioning and drift detection.

Skills

Unity Catalog

Delta Lake

RBAC

ABAC

RLS

Delta Sharing

SQL Admin (GRANTS/REVOKES)

Terraform (Databricks provider)

PowerShell

Azure Entra ID

GCP IAM & Workload Identity Federation

Tools

Terraform Databricks Provider

PowerShell

Databricks UI

Job description

What You’ll Do:The Unity Catalog Administrator will design, automate, and maintain the global data governance, infrastructure provisioning, and security model across the enterprise Databricks ecosystem. This role ensures data assets are systematically standardized, securely cataloged via Entra ID integration, audited for regulatory compliance, and programmatically deployed across multi-workspace architectures.Infrastructure Provisioning : Architect and maintain the global Unity Catalog Metastore, external cloud storage locations, storage credentials, and managed UC Volumes.Enterprise Automation : Programmatically deploy and manage all catalogs, schemas, external locations, and permissions schemas using a GitOps framework with Terraform.Access & Identity Control : Enforce identity federation with Microsoft Entra ID, manage fine-grained object privileges (SELECT, MODIFY, MANAGE), and govern group assignments.Standards & Policy Enforcement : Define and enforce enterprise-wide standards for naming conventions, metadata tagging, and strict Workspace-Catalog isolation boundaries across environments (Dev, QA, Stage, Prod).Advanced Data Protection : Implement and maintain scalable Row-Level Security (RLS) and Column-Level Masking routines to safeguard sensitive PII/PHI datasets.Compliance, Lineage & Auditing : Proactively monitor Unity Catalog System Tables (system.access.audit, system.billing.usage) and map end-to-end data lineage for regulatory compliance.Data Sharing Frameworks : Configure, manage, and audit Delta Sharing protocols and clean rooms to enable secure, zero-copy data exchange with external partners.Cross-Cloud Automation & GitOps: Programmatically deploy and govern all catalogs, schemas, external storage locations, and access control lists (ACLs) using a unified CI/CD GitOps pipeline. Enforce drift detection for manual permission mutations made in either the Azure or GCP Databricks UI.What You Bring:Databricks Governance Architecture: Deep architectural expertise in Unity Catalog, Delta Lake, Delta Sharing, System Tables.Automation & GitOps CI/CD: Experience with Terraform (specifically the Databricks Provider) and PowerShell for automated, repeatable environment deployments and state management is considered an asset.Advanced Data Security: Practical experience designing and implementing Role-Based Access Control (RBAC), Attribute-Based Access Control (ABAC), Row-Level Security (RLS), and Column-Level Data Masking.Data Strategy & Querying: Proficient in SQL (specifically administrative DDL for GRANTS/REVOKES) and familiar with enterprise data lifecycle management.Azure Infrastructure & Identity: Hands-on proficiency with Microsoft Entra ID (SCIM/AIM provisioning, group syncing), Azure IAM (User-Assigned Managed Identities, Access Connectors), and Azure Key Vault.GCP Infrastructure & Identity: Hands-on proficiency with Google Cloud Identity, IAM Service Accounts (with Workload Identity Federation), Manage SSO Integration, Google Cloud Storage (GCS) buckets, and GCP Workload Identity Federation.Location: Toronto, Ontario (Hybrid: In-office 4 days a week)We’re always looking for great talent! In addition to competitive pay, we offer:Comprehensive benefits and retirement programsPerformance incentives, Continuing Education ProgramsOther perks to support your well-beingCareer growth opportunities and product discountsBroadband Salary Range: $64,000 – $106,000Our typical hiring range is between $64,000 and $85,000. Salary decisions are also dependent on other factors such as your experience, industry benchmarks, internal equity and other role-specific requirements. For critical roles, the compensation offering will be reviewed to ensure alignment with market rate and conditions and the unique value you bring to the role.#LI-AK1This posting represents an existing vacancy within our organization.We may use artificial intelligence tools as part of our recruitment process to assist in the initial screening of resumes. All hiring decisions, including candidate evaluation, selection, and disposition, are made by human recruiters.About UsCanadian Tire Corporation, Limited (“CTC”) is one of Canada’s most admired and trusted companies. With more than 90 Owned Brands, over 1,600 retail locations, financial services, exemplary e-commerce capabilities, and exciting market-leading merchandising strategies. We dream big and work as one to innovate with purpose for our customers at every level of our business, investing in new technologies and products, and doubling down on top talent to drive the company forward. We offer competitive salaries and wages to CTC employees, as well as store discounts, supported learning through our Triangle Learning Academy, Canadian Tire Profit Sharing, and retirement and savings programs for eligible employees. As part of our enhanced flex benefits program, we offer mental health benefits in the amount of $5,000 per year for benefits-eligible employees and their families, including total well-being, and mental health tools and resources for all employees. Join us in helping to make life in Canada better through living and working our Core Values: we are innovators and entrepreneurs at our core, outcomes drive us, inclusion is a must, we are stronger together and we take personal responsibility. It is an especially exciting time to join CTC and its family of companies where career opportunities are wide-ranging! Join us, where there's a place for you here.Our Commitment to Diversity, Inclusion and BelongingWe are committed to fostering an environment where belonging thrives, and diversity, inclusion and equity are infused into everything we do. We believe in building an organizational culture where people are consistently treated with dignity while respecting individual religion, nationality, gender, race, age, perceived ability, spoken language, sexual orientation, and identification. We are united in our purpose of being here to help make life in Canada better.AccommodationsWe stand firm in our Core Value that inclusion is a must. We welcome and encourage candidates from equity-seeking groups such as people who identify as racialized, Indigenous, 2SLGBTQIA+, women, people with disabilities, and beyond. Should you require any accommodation in applying for this role, or throughout the interview process, please make them known when contacted and we will work with you to help meet your needs.