Senior Data Security Engineer, Big ID Deployment Lead

Title: Senior Data Security Engineer, Big ID Deployment Lead
Location: Remote

Senior Data Security Engineer, Big ID Deployment Lead
Position Overview
This role will wear two hats to lead the BIG ID install on AWS/ Integration and perform Cloud Security Architecture

Big ID
The BigID Platform Lead is responsible for the end-to-end management, deployment, configuration, and operation of the BigID data intelligence platform. This pivotal role ensures the platform effectively supports the organization's data discovery, classification, governance, and privacy compliance needs (including GDPR, CCPA, and HIPAA). The lead guides technical teams, drives platform adoption, and serves as the primary liaison between technical staff and governance initiatives.

Key Responsibilities

• Platform Management: Install, configure, and maintain the BigID platform across development (DEV), quality assurance (QA), and production (PROD) environments, ensuring optimal performance and stability.
• Data Governance & Compliance: Implement and enforce data governance policies, overseeing data classification, sensitivity labeling, data remediation (masking/redaction), and ensuring strict adherence to data privacy regulations (GDPR, CCPA, HIPAA) and internal controls.
• Technical Leadership & Architecture: Guide the overall architecture, design, and execution of data solutions, ensuring scalability, performance, and alignment with enterprise data strategy.
• Operations & Support: Manage the onboarding of new data sources, validate scan results, troubleshoot technical issues, and optimize data pipelines (using technologies like Spark and Hadoop).
• Cross-Functional Collaboration: Work closely with data scientists, data engineers, product managers, and business stakeholders to meet diverse data needs and drive platform adoption across the enterprise.
• Development & Integration: Support and manage API integrations, develop necessary scripting (Python, Shell), and leverage cloud services (AWS, GCP) for platform expansion and integration with other tools (e.g., Alation).

Core Skills & Qualifications

• BigID Expertise: Proven hands-on experience with the BigID platform, covering configuration, deployment, and operational management.
• Data Governance & Security: Deep understanding of data privacy principles, data security best practices, and compliance frameworks.
• Cloud & Big Data Technologies: Experience with major cloud platforms (AWS, GCP) and data processing tools (Spark, Hadoop).
• Technical Proficiency: Proficiency in scripting languages (Python, Shell),

Cloud Security Architect (AWS Focus)

Location: Remote (Preference for candidates in the Philadelphia or NYC Metro areas)
Experience Level: Mid-Senior (5-7+ years)

The Opportunity: Architect the Migration
We are looking for a pragmatic, builder-focused Cloud Security Architect who wants to do more than just monitor a steady state. You will be the tactical and strategic engine behind our major migration into AWS, defining the security patterns that will dictate how our applications live, breathe, and scale in the cloud. If you are ready to leave behind repetitive operational tickets to focus on design validation, threat modeling, and high-level architectural strategy, this is your next career step.

The Mission
Your core mission is to solve the complexity of secure cloud migration. We are moving critical applications to AWS, and we need an Architect to assess migration approaches, define the "golden paths" for data security, and validate designs before code hits production. You will bridge the gap between technical infrastructure, application owners, and business stakeholders, ensuring that security is an enabler of user experience, not a blocker.

Key Responsibilities

• Define Cloud Security Patterns: Create and document reusable security patterns and guardrails for AWS migration, ensuring teams have a secure blueprint to build against.
• Architecture Design & Validation: Conduct deep-dive design reviews and service validations for applications moving to the cloud. You will be the final gate of approval for security architecture.
• Migration Strategy Assessment: Evaluate various migration strategies (Rehost, Replatform, Refactor) to identify risks and implement compensating controls specific to data security.
• Threat Modeling: Lead threat modeling sessions with engineering teams to identify vulnerabilities in the design phase (shifting security left).
• Business & Stakeholder Alignment: Translate complex security risks into business language. You will meet with application owners and business sponsors to discuss priorities, user experience, and risk appetite.
• Data Security Governance: Establish strict requirements and guidelines for data protection, encryption, and classification within the AWS environment.

Must-Have Technical Skills

• Experience: 5-7+ years in Cybersecurity with a dedicated focus on Security Architecture or Cloud Engineering.
• AWS Mastery: Deep, hands-on understanding of the AWS ecosystem (IAM, VPC, Security Groups, GuardDuty, KMS, etc.) and how to secure it.
• Migration Experience: Proven track record of supporting cloud migration projects (on-prem to cloud or hybrid).
• Architectural Competence: Experience conducting design reviews, architectural assessments, and validating service configurations.
• Communication: Exceptional soft skills. You must be able to hold your own in a room with non-technical business leaders and explain why a security control matters to their bottom line.

"Nice to Haves" (Differentiators)

• Regional Location: Residence in the Philadelphia or NY Metro area is a massive plus.
• Certifications: CISSP, CCSP, or AWS Certified Security – Specialty.
• Framework Knowledge: Familiarity with NIST, ISO 27001, or SOC2 controls as they apply to cloud infrastructure.
• DevSecOps Exposure: Experience with Infrastructure as Code (Terraform/CloudFormation) and CI/CD pipeline security.

The Tech Stack

• Cloud Platform: AWS (Primary focus).
• Identity & Access: Okta, AWS IAM, SailPoint.
• Infrastructure: Terraform, Kubernetes/Containers.
• Security Tools: Palo Alto, Splunk (or similar SIEM), vulnerability scanning tools.
• Documentation: Visio, LucidChart, Confluence.