Data Security Architect: Fintech Data Protection

Cacheflow; San Francisco, Northern (CA, KY); Hybrid; USD 268,000 - 321,000; Full time

Job summary

Kikoff is seeking a Data Security lead to own the security pillar across our modern data stack. You will define strategy, sequence work, and drive it to completion, influencing every engineer and customer as we scale.

Implement encryption, access controls, and audit capabilities across AWS, Snowflake, and databases to ensure least privilege and auditable data flows in a regulated fintech environment.

Qualifications

• 6+ years in security engineering with hands-on data security experience.
• Experience with encryption, tokenization, and key management.
• Strong command of AWS security primitives (IAM, KMS, S3, VPC).
• Experience securing Snowflake and relational databases in production.
• Designed and shipped access control systems (RBAC/ABAC/ABAC).
• Scripting in Python, Go, or Ruby for automation.
• Infrastructure-as-code with Terraform or Pulumi.
• Comfortable in a regulated environment.

Responsibilities

• Own the data security roadmap end to end across AWS, Snowflake, and internal pipelines.
• Define strategy for access to sensitive data and enforce least privilege at scale.
• Build audit logging and data-access monitoring for audits and regulators.
• Enable engineers with reusable patterns and clear guidance for secure data handling.

Skills

Security engineering

Encryption

Tokenization

Access control design

Key management

Python

Tools

AWS IAM

KMS

S3 security

VPC controls

Snowflake

RDS

Terraform

Pulumi

Job description

Kikoff is seeking a Data Security lead to own the security pillar across our modern data stack. You will define strategy, sequence work, and drive it to completion, influencing every engineer and customer as we scale.

Implement encryption, access controls, and audit capabilities across AWS, Snowflake, and databases to ensure least privilege and auditable data flows in a regulated fintech environment.