Engineer I - Cloud Security Solutions

Key Responsibilities 1. Hands-On Implementation & Integration Design and implement field-level data protection using Protegrity Application Protection Gateways (APG), Database Protectors, and Cloud APIs. Integrate Protegrity tokenization and dynamic masking capabilities into Snowflake (via External Functions/API Gateways) and Databricks (via Unity Catalog, Python UDFs, and Spark jobs). Configure and enforce data protection rules on legacy on-premise databases (Oracle, SQL Server, DB2, etc.) and file systems. Identity, Access, & Key Management Integrate Protegrity policies with enterprise Identity Provider (IdP) systems, specifically Okta, for Attribute-Based Access Control (ABAC) and dynamic policy enforcement. Manage encryption key life cycles and hardware/cloud security integrations using AWS KMS and enterprise HSMs. 3. Tier-3 Support & Operational Upkeep Serve as the Tier-3 escalation point for complex runtime issues, performance bottlenecks, and protector engine failures. Lead cluster upgrades, policy synchronization checks, and regular maintenance of the Protegrity Enterprise Security Authority (ESA). Conduct performance tuning for high-throughput batch and streaming pipelines to minimize tokenization latency. 4. Technical Leadership & Governance Function as an independent lead engineer capable of driving delivery tasks from requirement gathering to production deployment without hand-holding. Partner with enterprise security and audit teams to ensure compliance with global data privacy regulations (PCI-DSS, GDPR, HIPAA). Required Qualification DomainRequired Skills & Experience Data Security ToolsProtegrity Suite: ESA, Database Protectors, Cloud Protectors, APG, Policy Agent. Cloud Platforms AWS Cloud: S3, Lambda, API Gateway, IAM, AWS KMS. Modern Data Stack Snowflake: External Functions, Masking Policies, API Integration Objects. Databricks: PySpark, Unity Catalog integration, Custom UDFs. On-Premise / DatabasesRDBMS (Oracle, MS SQL, PostgreSQL), batch scripting, legacy database connectors. IAM & Security Okta (SAML/OIDC/ABAC integrations), AWS KMS, SSL/TLS, tokenization vs. encryption mechanics. Scripting / Code Python, SQL, Shell Scripting, Scala or Java (optional). Ops & EscalationTier-3 troubleshooting, log analysis, root cause analysis (RCA), disaster recovery exercises.