Senior Data Security Engineer

Description

The company is a US drone maker and leads in autonomous flight. Its product team spans AI, hardware and software, operations, and customer work, serving users from utility inspectors to first responders and soldiers in the field.

The Business Data Platform team needs a senior engineer to own data security and access across the company, covering who can see which data, why, and how that is proven. The role reports to the head of Business Data Platform.

Sales, operations, finance, and people teams build their daily apps on Palantir Foundry, and more teams join each month. AI tools now read and write company data for people too. The platform stores pay, customer, cost, and export-controlled data.

Teams will bring you plans before they build with sensitive data. Your job is to help them get to a yes that is safe and quick.

Responsibilities

• Design the access model in Foundry: org-chart groups fed from Workday through Okta, plus application and data-access groups shaped around how Finance, Operations, Sales, and People use data.
• Make access change automatically when people join, move, or leave.
• Work with IT and Security on Okta groups, SSO, SCIM provisioning, egress rules, and data connection credentials. Write clear requirements, agree who owns each piece, and check the outcome.
• Keep Foundry access levels matching those in source systems and other data platforms, so that moving data in never exposes it to more people.
• Protect sensitive and export-controlled data using Foundry Markings and object and property security policies. Mask or redact anything a role should not see.
• Run Foundry day to day: users, groups, roles, upgrades, and access reviews. Answer who has access to what and why, with evidence strong enough for audits and customer questions.
• Work with the autonomy and AI infrastructure engineers on how AI agents and coding tools connect to Foundry through MCP servers, OAuth clients, and service accounts, so each agent sees only what its user may see.
• Lead the cross-functional Data Council and set shared standards with the other business systems owners on sharing and protecting data.

Requirements

• At least 5 years in data platform, data security, or infrastructure engineering, including owning access control on a platform such as Foundry, Databricks, or Snowflake.
• Experience provisioning groups from an HR system and identity provider such as Workday and Okta, separating org-chart groups from application and data-access roles, and handling reorgs, contractors, and exceptions.
• Hands-on production work with row- and column-level security, masking, redaction, and classification-based policies.
• Working knowledge of SAML, SCIM, SSO, Okta, and network egress controls, enough to design alongside IT and Security and to know where your part ends and theirs starts.
• Ability to explain access decisions to business users in plain language and to find a safe way to say yes.
• Strong SQL and Python, and hands-on use of AI coding tools such as Claude Code or Cursor.
• Palantir Foundry experience is strongly preferred, especially with Markings, Organizations, security policies, and project roles.
• Getting FAA Part 107 certification within your first 60 days is strongly encouraged for all employees and required for certain positions.
• Nice to have: Databricks Unity Catalog experience.
• Nice to have: Terraform or other infrastructure-as-code experience.
• Nice to have: governance work under ITAR, CMMC, or FedRAMP.

Conditions

Annual base salary range is $160,000 to $190,000.

Pay varies by skill level, proficiencies, transferable knowledge, and experience. Compensation for certain positions may also vary by location.

Relocation assistance may be offered for eligible roles.

The role is subject to applicable federal, state, and local laws and to company policies and eligibility rules.

The company provides equal opportunity and welcomes diverse perspectives.

Benefits

• Equity in the form of stock options, available to all regular, full-time employees.
• Group health insurance for regular, full-time employees.
• Paid vacation, sick leave, and holiday pay.
• 401(k) savings plan.