Databricks Security & Access Architect

Data Architect

Ready to turn bold ideas into real-world impact?
 At Genpact, we don’t just adapt to change, we lead it. AI and digital innovation are transforming the way businesses work, and we’re at the forefront of it. Genpact’s AI Gigafactory, our industry-first accelerator, exemplifies how we scale advanced technology solutions to help global enterprises work smarter, grow faster, and transform at scale. Whether tackling complex challenges through large-scale models or agentic AI, our breakthrough solutions tackle companies’ most complex challenges.
 
If you thrive in a fast-moving, innovation-driven environment, love building and deploying cutting-edge AI solutions, and want to push the boundaries of what’s possible, this is your moment. 
 
Genpact (NYSE: G) is an agentic and advanced technology solutions company. We leverage process intelligence and artificial intelligence to deliver measurable outcomes. With a strong partner ecosystem and decades of client trust, we provide innovative solutions that transform how businesses run. Powered by a team with an active learning mindset and client centricity at its core, we deliver lasting value for the world’s leading enterprises.
 Get to know us at genpact.com and on LinkedIn, YouTube, X, and Facebook.

Job Description

You will define and implement the end-to-end security architecture for Databricks on a major cloud (AWS, Azure, or GCP). This is a hands-on role responsible for the access, governance, and data-protection model across the platform. You have designed and implemented enterprise security controls for Databricks environments, and you will act as a cross-account authority on security guardrails, access governance, and compliance.

What You Will Do

Own end-to-end security architecture. Define and implement the security architecture for Databricks across the platform, from identity through data protection.

Manage identity and access. Own SSO/MFA integration and RBAC/ABAC access models, and establish access governance processes across accounts and workspaces.

Secure Unity Catalog. Design and enforce Unity Catalog security, data classification, and fine-grained access controls (row, column, and attribute level).

Secure Delta Sharing and open sharing. Ensure only approved data is exposed across cross-account and open sharing, with reliable, measurable revocation.

Design least privilege and blast-radius containment. Establish the lowest practical access boundary, preventing access to adjacent business-unit data and storage.

Control privileged access and configuration drift. Govern privileged elevation and break-glass access, and detect unauthorized changes with monitored alert latency and remediation.

Protect data and secrets. Establish controls for encryption, secrets management, and network security aligned to relevant regulatory compliance requirements.

Build guardrails and auditability. Set up security guardrails, auditability, and access governance so the platform stays compliant and controllable as it scales.

Provide cross-account technical leadership. Act as a go-to security reviewer across multiple accounts, contributing to design reviews and resolving access and governance issues that individual delivery teams cannot.

What You Bring (Required)

Hands-on experience designing and implementing security for enterprise Databricks environments.

Deep Unity Catalog security experience: RBAC/ABAC, fine-grained (row/column/attribute) access, data classification, and Delta Sharing / open sharing controls.

Least-privilege and blast-radius design across business units, containing access to adjacent data and storage.

Privileged access management experience: controlled elevation, break-glass, configuration-drift detection, and remediation.

Strong identity and access management background: SSO/MFA integration and access governance.

Expertise in encryption, secrets management, and network security on at least one major cloud (AWS, Azure, or GCP).

Working knowledge of regulatory compliance requirements relevant to data platforms.

Ability to design and run proof-of-control tests and quantify outcomes (e.g., revocation time, data exposure, drift-detection and alert latency), not just implement.

Nice to Have (Preferred)

Databricks Cloud Platform Architect accreditation (AWS, Azure, or GCP) or Databricks Platform Administrator.

Recognized cloud security certification (e.g., AWS or Azure security specialty, or CISSP). Note that Databricks has no standalone security certification, so security credentials come from the cloud provider or an industry body.

Multi-cloud experience across two or more of AWS, Azure, and GCP.

Regulated-industry experience (financial services, healthcare, or similar).

What This Role Is Not

This is a Databricks-native security and access architect role. It is not a general enterprise or datacenter security role. The right candidate has genuinely designed and implemented access, governance, and data-protection controls inside Databricks environments, distinct from a generalist security engineer without hands-on Databricks depth.

Qualifications

Bachelors - Business Analytics, Bachelors - Computer Science, Bachelors - Statistics, Masters - Data Science

Certifications

Certified Data Management Professional - RiversandRiversand, Databricks Certified Associate Developer for Apache Spark 3.0 - Databricks AcademyDatabricks Academy, Databricks Certified Associate Developer for Apache Spark - Databricks AcademyDatabricks Academy, Microsoft Certified: Azure Data Engineer Associate - MicrosoftMicrosoft, Oracle Database 12c Certified Implementation Specialist - OracleOracle

Required Skills

Accounts Payable Process, Accounts Payable Process, Accounts Receivable (AR), Aerospace Manufacturing, Agile Methodology, Automotive Manufacturing, Banking Capital Markets, Change Management, Claims Management, Client Relations, Cloud Computing, Collaboration Tools, Computer Vision, Consumer Electronics, Consumer Packaged Goods (CPG), Databricks Platform, Data Engineering, Design Thinking, Electronic Hardware, Entertainment Journalism, Executive Presence, Healthcare Payors, Inclusion, Industrial Manufacturing Processes, Information Security {+ 26 more}

Language

English (Required)

Language Proficiency -

Proficient - C2

Additional Job Location -

Job Type

Regular

Master Skill List -

Data Engineering

Remote Type -

Hybrid

Work Shift -

Flex Time (India)

Why join Genpact?
•    Lead AI-powered transformation – Drive innovation and solve real-world business challenges that matter
•    Make an impact – Help global enterprises solve business challenges that matter 
•    Accelerate your career – Gain hands-on experience, mentorship, and world-class learning opportunities to stay ahead
•    Work with the best – Join 140,000+ bold thinkers and problem-solvers who push boundaries every day 
•    Thrive in a values-driven culture – Our courage, curiosity, and incisiveness - built on a foundation of integrity and inclusion - allow your ideas to fuel progress 
 
Come join the 140,000+ coders, tech shapers, and growth makers at Genpact and take your career in the only direction that matters: Up.  
Let’s build tomorrow together. 
 
Genpact is an Equal Opportunity Employer and considers applicants for all positions without regard to race, color, religion or belief, sex, age, national origin, citizenship status, marital status, military/veteran status, genetic information, sexual orientation, gender identity, physical or mental disability or any other characteristic protected by applicable laws. Genpact is committed to creating a dynamic work environment that values respect and integrity, customer focus, and innovation.  
Furthermore, please do note that Genpact does not charge fees to process job applications and applicants are not required to pay to participate in our hiring process in any other way. Examples of such scams include purchasing a 'starter kit,' paying to apply, or purchasing equipment or training.