Principal Data Security Architect

Join the Digital Information Security Engineering team as a Principal Data Security Architect. In this individual-contributor role, you will define, design, and influence the enterprise's most complex data protection capabilities across various environments. You will focus on protecting sensitive data throughout its lifecycle, shaping enterprise data governance strategy, and partnering closely with the Data Protection Product Manager. Your responsibilities will include owning the enterprise reference architecture for data-centric security, leading design for complex problems, providing mentorship to senior engineers, and establishing risk-based automated remediation workflows.

• Definir, diseñar e influir en las capacidades de protección de datos más complejas de la empresa en entornos SaaS, web, endpoint y cloud.
• Establecer la arquitectura de referencia de la empresa para la seguridad centrada en los datos, definiendo los patrones de arquitectura, los estándares de diseño y las directrices que los equipos de ingeniería deben seguir.
• Colaborar estrechamente con el Product Manager de Protección de Datos para establecer la hoja de ruta y las prioridades, y traducir las capacidades en una reducción de riesgos duradera y medible.
• Bachelor's or Master's degree in Computer Science, Information Security, or a related field — or equivalent demonstrated experience
• 10–15+ years in data protection or security engineering, including significant time operating at a senior, staff, or principal level
• Proven ability to design and operate data protection controls at enterprise scale
• Demonstrated ability to make and defend architectural trade-offs across security, usability, cost, and operability
• Expertise implementing Zero Trust data protection strategies
• Deep, hands-on architecture and engineering experience across CASB (inline and API modes), DSPM, eDLP, Exact Data Match (EDM), and Indexed Document Matching (IDM)
• Strong command of data classification and content inspection, data exfiltration vectors and prevention techniques, and SaaS/cloud data security risks
• Strong understanding of identity, access control, and conditional access models
• Strong programming/scripting skills (Python preferred) applied to real automation and integration work
• Hands-on experience with REST APIs and security integrations, SIEM/SOAR platforms, and cloud environments (AWS, Azure, GCP)
• Demonstrate elite analytical and tuning expertise, especially with EDM/IDM
• Take a data-first approach to security, focused on measurable risk reduction
• Be deeply hands-on — an architect who still builds, not only advises
• Thrive in a fast-paced, diverse, and constantly evolving environment
• Influence and elevate senior engineers and cross-functional partners without formal authority
• Be proactive, curious, and relentless about improving data protection coverage and accuracy
• Missteps or failed approaches and what they changed as a result
• The concrete business and security problem being solved, the real-world constraints, and why the chosen approach won over the alternatives considered
• Specific enterprise data protection solutions they personally architected and implemented — not merely oversaw or advised on
• How they built, scaled, and maintained EDM/IDM detection in production and measurably improved accuracy over time
• This role requires evidence of real, production-grade work — not theoretical familiarity or vendor exposure alone. Candidates should be prepared to walk through, in concrete technical detail:
• How their designs reduced actual risk, supported by metrics and outcomes