Enterprise Data Security Architect — Hybrid/Remote

McKesson; Columbus (OH); Hybrid; USD 124,100 - 206,900; Full time

Job summary

McKesson’s CoverMyMeds Technology is seeking a Data Security Architect to lead enterprise data security across Databricks, Azure Data Lake, and reporting platforms. The role requires designing fine-grained access controls, IAM patterns, and PHI/PII protection strategies to enable secure analytics and external data sharing.

The ideal candidate has 7+ years in data security or architecture, strong SOX/HIPAA experience, and hands-on Databricks Unity Catalog and Azure security expertise, with a

Qualifications

• Bachelor’s degree in Computer Science, Information Systems, or a related field, or equivalent experience, and typically requires 7+ years in data security or data architecture.
• Proven experience implementing data security and governance controls in regulated environments (HIPAA; healthcare strongly preferred).
• Strong expertise in SOX IT General Controls (ITGC) domains, including logical access, change management, and audit controls.
• Hands‑on experience with Databricks Unity Catalog security models, including RBAC, ABAC, and data masking.
• Deep knowledge of Azure cloud security architecture, including networking, identity, and secrets management.
• Experience designing identity and access management solutions (Okta, Entra ID, SailPoint, privileged access tools).
• Demonstrated experience implementing encryption, tokenization, and de‑identification strategies for sensitive data.
• Experience designing secure data architectures for external/customer‑facing analytics products.
• Ability to translate regulatory requirements into implemented technical controls and audit artifacts.
• Strong communication skills with ability to present architecture concepts to technical, business, and audit stakeholders.

Responsibilities

• Own and evolve enterprise data security architecture across Databricks, Azure Data Lake, and enterprise reporting platforms.
• Design and enforce fine‑grained data access controls (RBAC, ABAC, row/column security) using Unity Catalog and governed tagging frameworks.
• Architect identity and access management (IAM) patterns integrating Okta, Microsoft Entra ID, SailPoint, and privileged access platforms.
• Define and implement PHI/PII protection strategies, including tokenization, encryption, de‑identification, and masking across environments.
• Establish secure data sharing and multi‑tenant access models for external customers and partners.
• Lead architecture for data rights, entitlements, and consent-based access controls, ensuring compliance with contractual and regulatory requirements.
• Build and operationalize security controls aligned to SOX ITGC, including logical access controls, change management, and audit evidence frameworks.
• Design audit-ready security architectures supporting HIPAA, SOC 2 Type II, and FedRAMP compliance requirements.
• Partner with engineering, SRE, and platform teams to embed security into CI/CD pipelines, platform onboarding, and development standards.
• Define and govern data classification, tagging, and lineage-aware security policies across medallion architectures.
• Evaluate and recommend enterprise security tooling and governance platforms.
• Produce architecture artifacts (decision records, control matrices, audit evidence) consumable by internal and external auditors

Skills

Databricks Unity Catalog security

Azure cloud security

IAM design

Encryption / tokenization

RBAC / ABAC / data masking

SOX ITGC

Regulatory compliance translation

stakeholder communication

Education

Bachelor’s degree in Computer Science / Information Systems or related field

Tools

Okta

Microsoft Entra ID

SailPoint

Privileged access tools

Job description

McKesson’s CoverMyMeds Technology is seeking a Data Security Architect to lead enterprise data security across Databricks, Azure Data Lake, and reporting platforms. The role requires designing fine-grained access controls, IAM patterns, and PHI/PII protection strategies to enable secure analytics and external data sharing.

The ideal candidate has 7+ years in data security or architecture, strong SOX/HIPAA experience, and hands-on Databricks Unity Catalog and Azure security expertise, with a