Senior Data Security Engineer

What you'll do

• Build and maintain Foundry groups, roles, and access policies provisioned from Workday and Okta; keep access synchronized with source systems.
• Protect sensitive and export-controlled data, administer Foundry access, and provide evidence for audits and customer questions.
• Partner with IT, Security, and AI infrastructure teams on identity, network controls, and secure agent access; lead data-sharing standards through the Data Council.

What they ask for

• 5+ years in data platform, data security, or infrastructure engineering, including owning access control on a data platform such as Foundry, Databricks, or Snowflake.
• Experience provisioning groups from an HR system and identity provider, separating organizational groups from application and data-access roles, and handling reorgs, contractors, and exceptions.
• Production experience with row- and column-level security, masking and redaction, and classification-based policies.
• Knowledge of SAML, SCIM, SSO, Okta, and network egress controls; strong SQL and Python.

Nice to have

• Palantir Foundry experience, especially Markings, Organizations, security policies, and project roles.
• Databricks Unity Catalog; Terraform or other infrastructure-as-code; or governance under ITAR, CMMC, or FedRAMP.

Pay

$160,000 - $190,000 USD annual base salary

Tools

Palantir Foundry, Workday, Okta, SAML, SCIM, SQL, Python, Databricks

AI focus

Work with AI infrastructure engineers to secure AI agents and coding tools connecting to Foundry through MCP servers, OAuth clients, and service accounts, so agents inherit the user's access limits; the role also uses AI coding tools such as Claude Code or Cursor.