GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. By taking a three-tiered, holistic approach for evaluating security posture and ecosystems, GuidePoint enables some of the nation’s top organizations, such as Fortune 500 companies and U.S. government agencies, to identify threats, optimize resources and integrate best-fit solutions that mitigate risk.
General Description
GuidePoint Security is seeking an experienced and strategic Senior Technical Data Security Architect to join our growing data platform team. In this highly visible role, you will be responsible for designing, implementing, and governing enterprise-grade data security frameworks across the Microsoft data ecosystem and Databricks lakehouse platform. You will serve as the authoritative technical expert on data protection, privacy, access governance, and compliance, partnering closely with engineering, architecture, and business stakeholders to embed security by design at every layer of the data stack.
About the Cloud Practice
The Cloud Practice is responsible for providing advisory services as well as secure implementations specific to security tooling with the intent of protecting the customers' identities, endpoints, data, applications, and cloud infrastructure by designing, deploying, and operationalizing Cloud Solution Providers native security solutions. We focus specifically on ensuring cloud security, data security, identity and access management, as well as threat protection has been implemented following best practices across the organization.
Our team of Microsoft specialists focus on deploying Microsoft security, compliance, and identity solutions to protect identities, devices, data, apps, and infrastructure. We partner with other Cloud Solution Provider teams as well as internal resources to ensure the overall goals of the clients are achieved and align with industry standards and best practices.
Roles and Responsibilities:
Data Security Architecture & Strategy
Design and maintain end-to-end data security architecture across Microsoft Azure, Microsoft Fabric, Azure Synapse Analytics, Azure Data Lake Storage (ADLS Gen2), and Databricks Lakehouse Platform.
Define and enforce enterprise data classification, labeling, and handling standards aligned with Microsoft Purview Information Protection.
Develop reference architectures and security blueprints for data ingestion, transformation, storage, and consumption layers.
Lead threat modeling sessions for data pipelines and analytics workloads, identifying and mitigating risks proactively.
Establish a Zero Trust data security model across all data platforms and integration points.
Microsoft Data Technologies - Security Focus
Architect and govern data security controls within Microsoft Fabric, including workspace-level and item-level permissions, sensitivity labels, and OneLake security.
Design role-based access control (RBAC) and attribute-based access control (ABAC) strategies across Azure Data Factory, Azure Synapse, Azure Databricks, and Azure SQL.
Implement and operationalize Microsoft Purview for data catalog governance, data lineage, and automated sensitivity classification across hybrid and multi-cloud data estates.
Configure and manage Azure Private Endpoints, VNet integration, and network security groups for data services to eliminate public exposure.
Oversee encryption strategies including Azure Key Vault integration, customer-managed keys (CMK), and data-at-rest / data-in-transit encryption standards.
Partner with identity teams to enforce Entra ID Conditional Access policies, Privileged Identity Management (PIM), and managed identities for data service authentication.
Lead the implementation and tuning of Microsoft Defender for Cloud data security posture management (DSPM) capabilities.
Databricks Security Architecture
Architect and implement Unity Catalog as the enterprise-wide data governance…