Databricks Security & Access Architect 4D

3502 Servicios Internacionales De Atencion Al Cliente, Limitada; Hyderabad; Vor Ort; INR 1.800.000 - 3.200.000; Vollzeit

Zusammenfassung

Genpact is seeking a Data Architect to define and implement end-to-end security for Databricks on major cloud platforms. This hands-on role focuses on access governance and data protection.

You will lead cross-account security, enforce Unity Catalog controls, and ensure compliant, auditable data sharing at scale. The ideal candidate has strong IAM, encryption, and regulatory knowledge.

Qualifikationen

• Hands-on security design for Databricks environments.
• Expertise in Unity Catalog RBAC/ABAC and data classification.
• Experience with privileged access management and auditability.

Aufgaben

• Own end-to-end security architecture for Databricks across the platform.
• Manage identity and access, including SSO/MFA and RBAC/ABAC.
• Secure Unity Catalog with data classification and fine-grained controls.
• Control Delta Sharing and cross-account data exposure.
• Design least privilege boundaries to restrict data access.
• Govern privileged elevation and detect configuration drift.
• Protect data and secrets with encryption and secrets management.
• Build guardrails and auditability to maintain compliance as it scales.
• Provide cross-account technical leadership across multiple teams.

Kenntnisse

Databricks security

Unity Catalog security

RBAC/ABAC governance

Identity & access management

Least-privilege design

Data protection & encryption

Tools

Databricks platform

Jobbeschreibung

Data Architect

Ready to turn bold ideas into real-world impact?

At Genpact, we don't just adapt to change, we lead it. AI and digital innovation are transforming the way businesses work, and we're at the forefront of it. Genpact's AI Gigafactory , our industry-first accelerator, exemplifies how we scale advanced technology solutions to help global enterprises work smarter, grow faster, and transform at scale. Whether tackling complex challenges through large-scale models or agentic AI , our breakthrough solutions tackle companies' most complex challenges.

If you thrive in a fast-moving, innovation-driven environment, love building and deploying cutting-edge AI solutions, and want to push the boundaries of what's possible, this is your moment.

Genpact (NYSE: G) is an agentic and advanced technology solutions company. We leverage process intelligence and artificial intelligence to deliver measurable outcomes. With a strong partner ecosystem and decades of client trust, we provide innovative solutions that transform how businesses run. Powered by a team with an active learning mindset and client centricity at its core, we deliver lasting value for the world's leading enterprises.

Get to know us at genpact.com and on LinkedIn , YouTube , X , and Facebook .

Job Description

You will define and implement the end-to-end security architecture for Databricks on a major cloud (AWS, Azure, or GCP). This is a hands-on role responsible for the access, governance, and data-protection model across the platform. You have designed and implemented enterprise security controls for Databricks environments, and you will act as a cross-account authority on security guardrails, access governance, and compliance.

What You Will Do

• Own end-to-end security architecture. Define and implement the security architecture for Databricks across the platform, from identity through data protection.
• Manage identity and access. Own SSO/MFA integration and RBAC/ABAC access models, and establish access governance processes across accounts and workspaces.
• Secure Unity Catalog. Design and enforce Unity Catalog security, data classification, and fine-grained access controls (row, column, and attribute level).
• Secure Delta Sharing and open sharing. Ensure only approved data is exposed across cross-account and open sharing, with reliable, measurable revocation.
• Design least privilege and blast-radius containment. Establish the lowest practical access boundary, preventing access to adjacent business-unit data and storage.
• Control privileged access and configuration drift. Govern privileged elevation and break-glass access, and detect unauthorized changes with monitored alert latency and remediation.
• Protect data and secrets. Establish controls for encryption, secrets management, and network security aligned to relevant regulatory compliance requirements.
• Build guardrails and auditability. Set up security guardrails, auditability, and access governance so the platform stays compliant and controllable as it scales.
• Provide cross-account technical leadership. Act as a go-to security reviewer across multiple accounts, contributing to design reviews and resolving access and governance issues that individual delivery teams cannot.

What You Bring (Required)

• Hands-on experience designing and implementing security for enterprise Databricks environments.
• Deep Unity Catalog security experience: RBAC/ABAC, fine-grained (row/column/attribute) access, data classification, and Delta Sharing / open sharing controls.
• Least-privilege and blast-radius design across business units, containing access to adjacent data and storage.
• Privileged access management experience: controlled elevation, break-glass, configuration-drift detection, and remediation.
• Strong identity and access management background: SSO/MFA integration and access governance.
• Expertise in encryption, secrets management, and network security on at least one major cloud (AWS, Azure, or GCP).
• Working knowledge of regulatory compliance requirements relevant to data platforms.
• Ability to design and run proof-of-control tests and quantify outcomes (e.g., revocation time, data exposure, drift-detection and alert latency), not just implement.

Nice to Have (Preferred)

• Databricks Cloud Platform Architect accreditation (AWS, Azure, or GCP) or Databricks Platform Administrator.
• Recognized cloud security certification (e.g., AWS or Azure security specialty, or CISSP). Note that Databricks has no standalone security certification, so security credentials come from the cloud provider or an industry body.
• Multi-cloud experience across two or more of AWS, Azure, and GCP.
• Regulated-industry experience (financial services, healthcare, or similar).

What This Role Is Not

This is a Databricks-native security and access architect role. It is not a general enterprise or datacenter security role. The right candidate has genuinely designed and implemented access, governance, and data-protection controls inside Databricks environm