Senior Data Platform Security Engineer — Snowflake & Secure Data Exchange

Real-time data doesn't wait. Neither do the threats against it.

We run event-driven infrastructure at enterprise scale — Kafka pipelines, Kinesis streams, EventBridge routing, SQS/SNS messaging — and we need a senior engineer who understands that streaming systems have a unique attack surface that most cloud security teams don't know how to handle.

What you'll own:

• Kafka and Confluent platform security — ACLs, mTLS, schema registry access controls, cluster hardening
• Amazon Kinesis and MSK security configuration and governance
• EventBridge, SQS, and SNS access policy enforcement
• IAM and KMS controls across event-driven AWS infrastructure
• CloudFormation or Terraform-driven security policy for streaming systems
• Python/Boto3 automation for compliance and access governance
• Multi-account AWS security guardrails via SCPs and AWS Organizations

You might be coming from:

• A Platform Engineering role where you owned Kafka or Confluent in production
• A Messaging or Middleware Engineering background with event-driven security experience
• An SRE role with deep Kafka/Confluent streaming infrastructure ownership
• A DevSecOps role embedded in a real-time data or streaming team

You'll thrive here if you:

• Have production Confluent or Kafka platform ownership — not just consuming topics, but securing the infrastructure itself
• Understand the security model for event-driven architectures — ACLs, mTLS, schema governance
• Have enforced IAM and KMS controls on streaming workloads at scale
• Have worked in a regulated financial services environment

The details:

• 6-month W2 contract | Strong extension potential
• $85–$95/hour
• Hybrid — Greater Philadelphia, PA or Charlotte, NC | 3 days onsite
• Start: ASAP

We also have a related opening focused on Data Sharing Platform Security (Snowflake/AWS Transfer Family/S3). If that's a better fit for your background, search "Senior Data Platform Security Engineer" on LinkedIn.