Senior Data Security Engineer

Job description

Job responsibilities

• Build the company's access model in Foundry: org-chart team groups provisioned from Workday through Okta, plus application and data-access groups designed around how Finance, Operations, Sales, and People use data.
• Partner with IT and Security on Okta groups, SSO, SCIM provisioning, and egress policies and credentials for data connections: bring clear requirements, agree on who owns what, and verify the result
• Keep Foundry in parity with access levels in our source systems and other data platforms, so moving data into Foundry never widens who can see it
• Protect sensitive and export-controlled data with Foundry Markings and object and property security policies, masking or redacting what a role should not see
• Administer Foundry day to day (users, groups, roles, upgrades, access reviews), and answer who has access to what, and why, with evidence that holds up to audits and customer questions
• Work with our autonomy and AI infrastructure engineers on how AI agents and coding tools connect to Foundry (MCP servers, OAuth clients, service accounts), so an agent sees only what the person using it is allowed to see
• Lead in our cross-functional Data Council, setting standards with the other business systems owners for how data is shared and protected