Principal Solution Architect – Data Platform Security

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee the architecture, fortification, and ongoing security enhancements of enterprise Snowflake platforms within intricate, security-sensitive client environments, ensuring robust controls, resilience, and long-term sustainability.

• Transform business, security, and technical needs into operational frameworks, roadmaps, and engineering tasks that enhance platform controls, access patterns, governance, and secure delivery practices.

• Design and implement proactive monitoring, alerting, and threat detection across Snowflake environments by utilizing native audit and telemetry data, integrating with SIEM or similar platforms to identify, investigate, and address anomalous or unauthorized activities.

• Employ threat modeling and attack-path analysis to pinpoint and mitigate risks associated with access models, data sharing, network controls, identity posture, third-party integrations, service accounts, secrets management, and configuration drift.

• Guide architectural and operational choices regarding governance, authentication, privileged access, network security, and data protection, balancing platform risk, business priorities, compliance demands, and performance objectives.

• Act as a trusted advisor and senior technical leader among client stakeholders, internal engineers, and partner teams, effectively communicating trade-offs, platform risks, and remediation strategies while navigating challenging decisions in complex environments.

• Enhance and contribute to managed services standards by developing automation, runbooks, accelerators, and best practices that improve the quality, consistency, and scalability of secure Snowflake operations.

• Lead cross-functional teams and mentor engineers while advancing phData’s secure managed services delivery model.

⛳️ Requirements

• 15+ years of experience in cloud and data infrastructure, with significant expertise in security engineering, platform security, or security operations roles.

• Extensive production experience with Snowflake, encompassing platform architecture, administration, security design, and operational governance in complex enterprise environments.

• Profound knowledge in Snowflake platform security, including role-based access control, managed access, secure data sharing, account guardrails, privileged access controls, governance patterns, and data protection measures such as masking and row- or column-level access.

• Practical experience with Snowflake audit and telemetry data, including sources like ACCOUNT_USAGE views such as ACCESS_HISTORY, QUERY_HISTORY, LOGIN_HISTORY, and POLICY_EVENTS, for investigation, anomaly detection, and control validation.

• Experience in integrating Snowflake audit logs, platform logs, and security events into SIEM or similar monitoring systems such as Splunk, Microsoft Sentinel, CrowdStrike, or Datadog, including the design of log pipelines, detection rules, escalation workflows, and remediation procedures.

• Strong technical expertise in network, identity, authentication, secrets management, and service account lifecycle controls pertinent to Snowflake and cloud data platforms, including private endpoints, VPC or VNet peering, PrivateLink, IP allowlisting, MFA, SSO or SAML, OAuth token scoping, key pair authentication, and credential rotation policies.

• Hands-on experience with secrets management tools such as AWS Secrets Manager, HashiCorp Vault, or Azure Key Vault.

• Solid working knowledge of SQL, Infrastructure as Code, Python automation, and CI/CD to facilitate secure platform delivery and repeatable operational controls.

• Experience in delivering managed services or consulting projects within complex enterprise environments, with the capability to decompose intricate platform and security challenges into structured, actionable tasks.

• Bachelor’s degree in Computer Science, Engineering, or a related field, or equivalent practical experience.

🏝️ Benefits

• Remote-First Work Environment

• 401k plan with company match

• Dental and Vision insurance

• Home Office Equipment Stipend

• Annual stipend for Learning and Development

• Competitive compensation, excellent benefits, 4 weeks PTO, plus 10 holidays and additional perks