Senior Data Security Engineer

Skydio, Inc.; San Mateo (CA); On-site; USD 160,000 - 190,000; Full time

Benefits offered by this job

Stock options

Health insurance

401K savings plan

Paid vacation

Job summary

Skydio, Inc. in San Mateo, CA is seeking a senior data security engineer to own access control in Foundry, provisioning groups from Workday via Okta, and collaborating with IT and Security.

You will design and implement granular access policies, maintain compliance with data protection standards, and ensure only authorized users can access sensitive data, while enabling teams to move quickly. This role emphasizes cross-functional governance, cloud data platforms, and the opportunity to shape how

Qualifications

• Minimum 5+ years in data platform, data security, or infrastructure engineering, with ownership of access control.
• Experience provisioning groups from HR systems and identity providers like Workday and Okta.
• Experience implementing row- and column-level security, masking, and classification-based policies.
• Knowledge of SAML, SCIM, SSO, and network egress controls; ability to collaborate with IT and Security.
• Strong SQL and Python, with exposure to AI coding tools.
• Foundry experience preferred, including Markings and security policies.
• Databricks Unity Catalog experience is a plus.
• Terraform or IaC experience.
• Governance work under ITAR, CMMC, or FedRAMP.

Responsibilities

• Own data security and access model in Foundry, provisioning groups from Workday via Okta.
• Collaborate with IT and Security on Okta groups, SSO, SCIM provisioning, and egress policies.
• Maintain parity of Foundry access with source systems and other data platforms.
• Protect sensitive data with Foundry Markings and security policies.
• Administer Foundry (users, groups, roles, upgrades, reviews) and provide audit-ready evidence.
• Coordinate with AI infra engineers on securely connecting AI tools.
• Lead Data Council to set data sharing and protection standards.

Skills

SQL

Python

Foundry

Okta

SSO

SCIM

Data security

Tools

Palantir Foundry

Databricks Unity Catalog

Workday

Okta

Terraform

Job description

San Mateo, California, United States- Full-time

About the role:

Skydio runs its business on Palantir Foundry. Sales, operations, finance, and people teams build the apps they work in every day there. More teams start building on it every month, and more of that work now runs through AI tools that read and write company data on someone's behalf. The same platform holds compensation, customer, cost, and export-controlled data.

Our Business Data Platform team is hiring a senior engineer to own data security and access for the whole company: who can see what, why, and how we prove it. You will turn what teams need into groups, roles, and policies in Foundry, provisioned from Workday and Okta, and work with IT and Security on the identity and network side. Teams will come to you before they build with sensitive data, and your job is to get them to yes, safely and quickly. You will report to the head of Business Data Platform.

How you'll make an impact:

Build the company's access model in Foundry: org-chart team groups provisioned from Workday through Okta, plus application and data-access groups designed around how Finance, Operations, Sales, and People use data. Access updates on its own when people join, move, or leave

Partner with IT and Security on Okta groups, SSO, SCIM provisioning, and egress policies and credentials for data connections: bring clear requirements, agree on who owns what, and verify the result

Keep Foundry in parity with access levels in our source systems and other data platforms, so moving data into Foundry never widens who can see it

Protect sensitive and export-controlled data with Foundry Markings and object and property security policies, masking or redacting what a role should not see

Administer Foundry day to day (users, groups, roles, upgrades, access reviews), and answer who has access to what, and why, with evidence that holds up to audits and customer questions

Work with our autonomy and AI infrastructure engineers on how AI agents and coding tools connect to Foundry (MCP servers, OAuth clients, service accounts), so an agent sees only what the person using it is allowed to see

Lead in our cross-functional Data Council, setting standards with the other business systems owners for how data is shared and protected

What makes you a good fit:

5+ years in data platform, data security, or infrastructure engineering, including owning access control on a data platform such as Foundry, Databricks, or Snowflake

You have provisioned groups from an HR system and identity provider such as Workday and Okta, separated org-chart groups from application and data-access roles, and handled reorgs, contractors, and exceptions

Production experience implementing row- and column-level security, masking and redaction, and classification-based policies

You know SAML, SCIM, SSO, Okta, and network egress controls well enough to design with IT and Security, and you know where your ownership ends and theirs begins

You explain access decisions to business users in plain terms, and you look for a safe way to say yes

Strong SQL and Python, and you build with AI coding tools like Claude Code or Cursor yourself

Palantir Foundry experience strongly preferred, especially Markings, Organizations, security policies, and project roles

Obtaining FAA Part 107 certification within the first 60 days of employment is strongly encouraged for all Skydio employees and required for certain positions

Databricks Unity Catalog experience

Terraform or other infrastructure-as-code experience

Governance work under ITAR, CMMC, or FedRAMP

Compensation: At Skydio, our compensation packages for regular, full-time employees include competitive base salaries, equity in the form of stock options, and comprehensive benefits packages. Compensation will vary based on factors, including skill level, proficiencies, transferable knowledge, and experience. Relocation assistance may also be provided for eligible roles. The annual base salary range for this position is $160,000 - $190,000*. Fundamentally, we believe that equity is the key to long-term financial growth, and we ensure all regular, full-time employees have the opportunity to significantly benefit from the company's success. Regular, full-time employees are eligible to enroll in the Company’s group health insurance plans. Regular, full-time employees are eligible to receive the following benefits: Paid vacation time, sick leave, holiday pay and 401K savings plan. This position and all associated benefits are subject to applicable federal, state, and local laws, as well as the Company’s policies and eligibility criteria.

*Compensation for certain positions may vary based on the position’s location.

#LI-LP1

At Skydio we believe that diversity drives innovation. We have created a multidisciplinary environment that embraces the power of diverse perspectives to create elegant solutions for complex problems. We are committed to growing our network of people, programs, and resources to nurture an inclusive culture.

Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or other characteristics protected by federal, state or local anti-discrimination laws.

For positions located in the United States of America, Skydio, Inc. uses E-Verify to confirm employment eligibility. To learn more about E-Verify, including your rights and responsibilities, please visit https://www.e-verify.gov/

Skydio provides equal employment opportunities to applicants and employees without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, or any other classification protected by applicable law.

Skydio is a federal contractor or subcontractor subject to certain governmental recordkeeping and reporting requirements for the administration of civil rights laws and regulations. Employment decisions are made on the basis of job-related criteria without regard to race, ethnicity, color, religion, sex, sexual orientation, gender identity, marital status, age, genetic information, national origin, disability, protected veteran status, or any other classification protected by applicable law.