Senior Databricks Security Architect (Azure/AWS)

Axos Business Center; Metro Manila; On-site; PHP 2,000,000 - 3,200,000; Full time

Job summary

Axos Business Center is seeking a Senior Databricks Security Engineer to secure our Azure and/or AWS Databricks Lakehouse platform, ensuring data confidentiality, integrity, and regulatory compliance across all layers. You will design security architectures, implement Unity Catalog, and govern access controls while coordinating with data engineering and ML teams.

The role requires deep cloud security expertise, experience with Delta Lake protections, and strong auditing capabilities to support

Qualifications

• 5+ years of information security experience, with 3+ years focused on big data or cloud data platform security
• Hands‑on expertise with Databricks platform administration and security: Unity Catalog, cluster policies, workspace management, secrets
• Experience securing Databricks on Azure (ADLS Gen2, Azure AD integration, VNet injection) or AWS (S3, IAM roles, VPC)
• Proficiency in PySpark, Python, and SQL for data security tooling, audit analysis, and access control implementation
• Strong understanding of data governance frameworks and their application in regulated financial services environments
• Knowledge of PCI-DSS, SOX, GDPR, CCPA, BCBS 239
• Familiarity with MLOps security concepts and risks in model lifecycle management

Responsibilities

• Design, implement, and govern the Databricks security architecture including Unity Catalog, workspace configurations, and cluster policies
• Lead Unity Catalog implementation: fine-grained access control, data lineage, row/column-level security, and ABAC
• Manage Databricks workspace security: network configurations (Private Link, VPC peering, IP allowlisting), secrets management, and init scripts security review
• Implement and monitor Databricks audit logging for threat detection and compliance reporting
• Govern service principal and PAT lifecycle management; enforce OAuth 2.0 / OIDC authentication integration
• Collaborate with data engineering and ML teams to embed security reviews into data pipeline and notebook development workflows
• Lead data classification and protection initiatives within the Lakehouse - implement Delta Lake encryption, masking, and DLP policies
• Drive compliance alignment for Databricks workloads
• Develop and maintain Databricks security baselines, hardening standards, and configuration-as-code templates
• Perform security assessments of ML models and pipelines for adversarial risks, data poisoning, and model exfiltration threats
• Act as the internal SME for Databricks security, advising on platform upgrades, feature adoption, and emerging risks
• Support third-party and internal security audits; produce evidence and remediate findings related to data platform controls

Skills

Databricks security

Cloud security

Data governance

Regulatory compliance

Threat detection

Tools

Unity Catalog

Azure AD

AWS S3

VPC/Private Link

PySpark

Python

SQL

Job description

Axos Business Center is seeking a Senior Databricks Security Engineer to secure our Azure and/or AWS Databricks Lakehouse platform, ensuring data confidentiality, integrity, and regulatory compliance across all layers. You will design security architectures, implement Unity Catalog, and govern access controls while coordinating with data engineering and ML teams.

The role requires deep cloud security expertise, experience with Delta Lake protections, and strong auditing capabilities to support