The Saros Group

Platform Engineer

• Design and enforce RBAC/ABAC policies, SCIM provisioning, and SSO/MFA for Databricks workspaces.
• Manage identity lifecycle, including onboarding/offboarding and periodic access reviews.
• Integrate Databricks and AWS services with enterprise IAM solutions (e.g., Azure AD, Okta).
• Implement AWS IAM roles, policies, and permission boundaries for secure data access.
• Ensure secure integration between AWS, Databricks, and Microsoft Power BI for reporting.
• Develop and maintain security architecture for AWS and Databricks environments supporting Power BI analytics.
• Design secure data pipelines and enforce encryption in transit and at rest across AWS S3, Databricks, and Power BI.
• Implement network security controls (VPC, security groups, private endpoints) for AWS and Databricks connectivity.
• Lead requirements gathering sessions with stakeholders to define security needs for AWS, Databricks, and Power BI integrations.
• Document security requirements, architecture diagrams, and implementation plans.
• Maintain detailed security design documentation and update as environments evolve.
• Investigate and respond to IAM-related and platform security incidents and defects.
• Ensure adherence to SOC 2, HIPAA, GDPR, and internal security standards across AWS and Databricks.
• Implement data governance policies for sensitive data used in Power BI reporting.
• Apply Databricks Security Profile features (CIS-hardened images, FIPS 140 encryption, TLS 1.2+).
• Validate secure cluster configurations and enforce encryption policies in Databricks and AWS.
• Harden AWS services (EC2, S3, IAM) following CIS benchmarks and best practices.
• Partner with data engineering, BI, and cloud teams to implement security best practices.
• Provide security posture reports and IAM metrics to leadership.
• Support secure integration of Power BI with AWS and Databricks for enterprise reporting.

Cloud & Data Platform Security Engineer