Note: The job is a remote job and is open to candidates in USA. Northrop Grumman is an aerospace and defense company seeking a Lead Databricks Data Security Engineer to own the design, implementation, and governance of access controls across its Databricks Lakehouse environment. The role combines strategic security architecture and hands-on software engineering, including identity governance, compliance controls, data classification, and infrastructure-as-code automation.

Responsibilities

• Lead the design and implementation of RBAC and ABAC within Databricks Unity Catalog, including data structure, access models, and tagging standards
• Define the security architecture for data access, including dynamic views, row-level security, and column masking
• Develop the identity governance approach for Databricks, including service principals, workload identities, and integration with enterprise identity providers
• Translate regulatory, contractual, and compliance requirements into practical technical controls within the platform
• Establish and maintain data classification standards and tagging structures that support scalable access control
• Implement grants, catalogs, tags, and access controls as code using Terraform and/or Databricks Asset Bundles to support version control and audit readiness
• Work closely with workspace administrators and platform engineers to align workspace, compute, secrets, and network controls with the broader data access strategy
• Create guardrails, templates, and streamlined workflows that allow data engineers to manage access appropriately while maintaining strong security controls

Skills

• Bachelor's degree in a relevant discipline and at least 8 years as a Software Engineer or Data Engineer with a heavy focus on data platform security and security automation; Master's degree and at least 6 years of relevant experience
• At least 2 years of hands on experience implementing Databricks Unity Catalog security features
• Demonstrated experience designing and implementing RBAC and ABAC models at scale, including hands on experience with Databricks Unity Catalog, grants, dynamic views, row and column level filtering and masking
• Fluency with identity and federation patterns including SCIM, service principals, and integration with enterprise identity providers such as Entra ID
• Experience applying infrastructure-as-code practices, preferably Terraform to access, tagging, and policy management in Databricks
• Proficiency in Python and SQL for automation, monitoring, and compliance
• The ability to obtain a government security clearance
• Working onsite full time in Falls Church, VA
• Master's degree

Benefits

• Overtime
• Shift differential
• A discretionary bonus
• Annual bonuses designed to reward individual contributions as well as allow employees to share in company results
• Long Term Incentives for employees in Vice President or Director positions
• Health insurance coverage
• Life and disability insurance
• Savings plan
• Company paid holidays
• Paid time off (PTO) for vacation and/or personal business
• Fulltime telework

Company Overview