Data Security Architect

We are looking for a Data Security Architect

The Data Security Architect will drive the enterprise data protection strategy and design scalable, secure architectures that safeguard critical business, operational, and manufacturing data across cloud, SaaS, and hybrid environments. In this role, you will apply deep expertise in data security, cloud architecture, and governance to design scalable, secure solutions that protect sensitive enterprise, operational, and manufacturing data. You will partner with cloud, data, application, and OT teams to embed security design into IaaS, PaaS, SaaS, data platforms and OT ecosystems while mentoring engineers and influencing senior stakeholders.

Responsibilities:

• Develop and maintain enterprise data security architecture standards, patterns, and roadmaps to protect sensitive enterprise, operational, and manufacturing data.
• Design and implement data protection controls across AWS and Azure, including data classification, encryption, key management, DLP/DSPM, data activity monitoring, and structured and unstructured data access governance.
• Define secure data architecture patterns for data lakes, analytics platforms, ERP systems, SaaS applications, and AI/ML workloads.
• Architect secure data flows between enterprise IT and OT/manufacturing systems (ERP, MES, SCADA, etc.).
• Partner with Enterprise Architecture, Cloud Engineering, Data Engineering, DevOps, Application Security, Compliance, and OT Security teams to embed data security into platform architecture and lifecycle processes.
• Provide technical leadership and mentorship to security engineers and analysts.
• Evaluate new data security tools, technologies, and controls, and contribute to vendor strategy and standards.

Requirements:

• 5-7 years of related work experience in cybersecurity, with a strong focus on data security and cloud architecture.
• Proven experience designing secure data architectures in AWS and/or Azure environments.
• Experience with Data Loss Prevention (DLP), data classification, and data governance technologies.
• Good understanding of Identity and Access Management (IAM), Privileged Access Management (PAM), and Zero Trust architecture.
• Experience in securing cloud-native data services, storage solutions, and integration patterns (APIs, ETL/ELT pipelines).
• Knowledge of encryption (at rest, in transit, in use), key management solutions, and secrets management.
• Understanding of enterprise applications (ERP, supply chain systems) and data protection considerations.
• Ability to lead architectural discussions and influence technical and business stakeholders.
• Strong analytical, problem-solving, and communication skills.
• Bachelor's degree in Computer Science, Information Security, Engineering, or equivalent practical experience.

Preferred Skills:

• Certifications such as CISSP, CCSP, SABSA, AWS/Azure Security Specialty, or TOGAF.
• Experience securing data in manufacturing or OT environments.
• Experience supporting large-scale cloud migration or modernization programs.
• Experience with DSPM, CASB, or cloud-native data protection tooling across multi-cloud environments is a plus.