Назад
Company hidden
1 час назад

Senior Data Security Engineer (Palantir Foundry)

160 000 - 190 000$
Формат работы
remote (только USA)
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Senior Data Security Engineer (Palantir Foundry): Building and governing company-wide data access models in Foundry with an accent on identity provisioning, sensitive-data protection, and auditability. Focus on designing row- and column-level security, integrating Workday and Okta, and controlling how AI agents access governed data.

Location: Remote, United States; listed location: San Mateo, California, United States

Annual base salary: $160,000–$190,000 USD

Company

hirify.global develops autonomous drones and aerial mobility technology, combining artificial intelligence with hardware and software products for utility inspection, public safety, national security, and other applications.

What you will do

  • Build the company-wide access model in Palantir Foundry, including Workday- and Okta-provisioned organizational groups and application and data-access roles.
  • Partner with IT and Security on Okta groups, SSO, SCIM provisioning, network egress policies, and credentials for data connections.
  • Maintain access parity between Foundry, source systems, and other data platforms so data movement does not expand visibility.
  • Protect sensitive and export-controlled data using Foundry Markings, object and property security policies, masking, and redaction.
  • Administer Foundry, conduct access reviews, and provide evidence explaining who has access to what and why.
  • Work with autonomy and AI infrastructure engineers on MCP servers, OAuth clients, service accounts, and agent access; lead standards in the cross-functional Data Council.

Requirements

  • 5+ years of experience in data platform, data security, or infrastructure engineering, including ownership of access control on a platform such as Foundry, Databricks, or Snowflake.
  • Experience provisioning groups from HR and identity systems such as Workday and Okta, separating organizational groups from application and data-access roles, and handling reorganizations, contractors, and exceptions.
  • Production experience with row- and column-level security, masking, redaction, and classification-based policies.
  • Working knowledge of SAML, SCIM, SSO, Okta, and network egress controls sufficient to design with IT and Security.
  • Ability to explain access decisions to business users in clear, practical terms.
  • Strong SQL and Python skills and hands-on use of AI coding tools such as Claude Code or Cursor.
  • Obtaining FAA Part 107 certification within the first 60 days is required for certain positions.

Nice to have

  • Palantir Foundry experience, especially Markings, Organizations, security policies, and project roles.
  • Databricks Unity Catalog experience.
  • Terraform or other infrastructure-as-code experience.
  • Governance experience under ITAR, CMMC, or FedRAMP.
  • FAA Part 107 certification is strongly encouraged for all hirify.global employees where not required.

Culture & Benefits

  • Remote work option for the United States role.
  • Regular full-time employment includes stock-option equity and comprehensive benefits, subject to company policies and eligibility criteria.
  • Benefits include group health insurance, paid vacation, sick leave, holiday pay, and a 401(k) savings plan.
  • Relocation assistance may be provided for eligible roles.
  • hirify.global promotes a multidisciplinary and inclusive environment focused on diverse perspectives and complex problem-solving.

Hiring process

  • Qualified applicants are considered without regard to protected characteristics.
  • For positions located in the United States, employment eligibility is verified through E-Verify.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →