Data Security Architect

ProSearch; Westbrook (ME); Hybrid; USD 69,000 - 80,000; Part time

Job summary

ProSearch is seeking a Data Security Architect for a hybrid role in Westbrook, Maine. The contract position focuses on enterprise data protection, cloud security, and security architecture across a large-scale environment.

The ideal candidate will have 8–12 years of hands-on experience in data security, cloud security, or security architecture, with proven ability to design scalable controls, DSPM, DLP, and CASB implementations across cloud and SaaS platforms.

Qualifications

• 8–12 years in data security, cloud security, or security architecture.
• Proven experience designing enterprise data security programs across cloud and SaaS.
• Strong leadership and communication for cross-functional teams.

Responsibilities

• Lead enterprise data protection architecture design and standards.
• Implement data classification, encryption, and DLP controls.
• Ensure security controls across cloud, SaaS, and applications.
• Collaborate with data engineering and security teams.

Skills

Data security

Cloud security

Security architecture

DSPM

DLP

CASB

RBAC

ABAC

Data governance

Snowflake security

Databricks

AWS

GCP

Azure

Entra ID

Tools

Snowflake

Databricks

Alation

Job description

Data Security Architect | Westbrook, ME | Hybrid | Pay Rate: $50 to $58 per hour depending on experience | Data Security Architect opportunity for experienced cybersecurity professionals with 8 to 12 years of data security, cloud security, or security architecture experience. This contract role offers the opportunity to lead enterprise data protection strategy, design scalable security architectures, and strengthen cloud and SaaS security controls across a complex enterprise environment.

We are seeking a highly experienced Data Security Architect to define, implement, and evolve enterprise-wide data security architecture for a large-scale cloud-first environment. This role requires extensive expertise in data protection, cloud security architecture, Snowflake security, data governance, DSPM platforms, DLP solutions, and identity-driven access controls.

The ideal candidate will have a proven track record designing and scaling data security programs across cloud platforms, SaaS applications, data engineering environments, and enterprise identity ecosystems. Candidates must possess 8 to 12 years of hands-on experience in data security, cloud security, or security architecture and demonstrate success implementing enterprise-grade security controls and governance frameworks.

Job Title: Data Security Architect

Location: Westbrook, Maine (Hybrid, Local Candidates Only)

Work Type: Contract

Pay Rate: $50 to $58 per hour depending on your experience and expertise

Key Responsibilities

Enterprise Data Security Architecture & Design

• As the Data Security Architect, you will lead the design and implementation of enterprise data protection strategies by:Defining enterprise-wide data security architecture standards
• Designing data discovery and classification frameworks using DSPM technologies
• Establishing data classification, labeling, and tagging models
• Developing encryption, tokenization, and data masking strategies
• Creating Data Loss Prevention (DLP) and Cloud Access Security Broker (CASB) control frameworks
• Designing role-based and attribute-based access control models (RBAC and ABAC)
• Implementing data movement, sharing, and retention controls
• Ensuring consistent security controls across cloud, SaaS, and application environments

Platform Security Integration

• Design and drive security integration across enterprise platforms, including:
• Snowflake security architecture
• Databricks security controls
• Microsoft 365 security and DLP controls
• Box governance and collaboration security
• Microsoft Entra ID identity security and access management
• AWS cloud security architecture
• Azure security services
• Google Cloud Platform security controls
• Data catalog and governance solutions such as Alation
• Additional responsibilities include:
• Aligning DSPM findings with enterprise security controls
• Mapping data ownership and governance requirements
• Translating business and compliance risks into technical security requirements
• Establishing scalable cloud security patterns and frameworks

Reference Architecture & Engineering Enablement

• The successful candidate will: Develop and maintain an enterprise Data Security Reference Architecture
• Establish implementation guidance for cloud engineering teams
• Support data engineering teams with secure data architecture best practices
• Enable security‑by‑design across platforms, workflows, and applications
• Promote proactive data protection rather than downstream remediation

Collaboration & Technical Leadership

• Partner closely with: Data Security Program Leadership
• Security Engineering Teams
• Cyber Defense and SOC Teams
• Application Development Teams
• Responsibilities include:
• Delivering architectural guidance for new initiatives
• Influencing enterprise security decisions
• Ensuring security controls remain aligned to business and regulatory requirements

Governance, Compliance & Continuous Improvement

• Lead the evolution of enterprise data security standards by:
• Maintaining data protection policies and standards
• Supporting regulatory compliance initiatives
• Improving enterprise data governance practices
• Evaluating emerging security technologies and data protection capabilities
• Assessing new DSPM, DLP, and CASB platforms
• Continuously refining architecture based on evolving threats, operational feedback, and business needs

Required Qualifications

Experience Requirements

• Candidates must possess 8 to 12 years of professional experience in Data Security, Cloud Security, or Security Architecture. Applicants should demonstrate significant experience in:
• Enterprise data security architecture
• Cloud-native security design
• Security architecture frameworks and standards
• Data governance and protection programs
• Cloud and SaaS security implementations
• Enterprise cybersecurity strategy

Required Technical Expertise

• Strong experience designing and securing: Snowflake data platforms
• AWS cloud environments
• Google Cloud Platform environments
• Hands‑on expertise with: Data Security Posture Management (DSPM)
• Cloud Access Security Broker (CASB) solutions
• Data classification and tagging frameworks
• Data masking and tokenization technologies
• Encryption and key management strategies
• Role‑Based Access Control (RBAC)
• Attribute‑Based Access Control (ABAC)
• Data governance and catalog platforms
• Regulatory compliance requirements including GDPR, SOC 2, and PCI DSS

Leadership & Communication Skills

• Candidates must demonstrate the ability to: Design enterprise‑scale security architectures
• Translate cyber risk into technical controls
• Communicate effective with technical and business stakeholders
• Lead architectural discussions and security reviews
• Produce architecture diagrams, technical documentation, and executive presentations
• Drive consensus across cross‑functional teams

Preferred Qualifications

• Experience implementing enterprise DSPM programs
• Background supporting data engineering and analytics organizations
• Experience designing security controls within Snowflake environments
• CISSP certification
• CCSP certification
• AWS Certified Solutions Architect certification
• Other relevant cloud security or cybersecurity certifications

Why Apply?

This Data Security Architect position offers the opportunity to influence enterprise-wide cybersecurity strategy while driving modern cloud security, data governance, and data protection initiatives. You will work with leading technologies including Snowflake, Databricks, AWS, Azure, Microsoft 365, Entra ID, Box, DSPM, DLP, and CASB platforms while helping shape the future of enterprise data security.

Salary Disclaimer

The salary range for this role reflects the minimum and maximum compensation for the role. Offers are typically made between the range minimum and the range midpoint. Actual compensation will be determined based on job-related skills, experience, and expertise, as evaluated during the interview process. Compensation may also vary based on where a role is performed.

ProSearch is an Equal Opportunity Employer and considers all qualified applicants for employment without regard to legally protected characteristics. All employment decisions are based on business needs, job requirements and individual qualifications.