Lead Data Security Solution Engineer

Remote in Armenia,

Security.IAM

Facebook LinkedIn Send via email

Looking for something else?

Find a vacancy that works for you. Send us your CV to receive a personalized offer.

Find me a job

Location-specific conditions & benefits*

Choose an option

We are seeking a Lead Data Security Solution Engineer to review requirements produced by the Business Analyst and design, validate, and prototype secure technical solutions for BR Data In-Licensing.

The landscape is predominantly relational, with primary control at the data and database layer, emphasizing identity-based authentication, fine-grained authorization, data firewalling, auditability, lifecycle control, and defensible deletion.

Responsibilities

Review Data In-Licensing requirements, workflow maps, data flows, entitlement rules, and dependency records; assess relational database platforms, schemas, connectivity methods, query patterns, and identify where licensed data is stored, transformed, replicated, extracted, or backed up
Assess current database security capabilities and identify gaps, constraints, risks, and prerequisites
Design authentication for named users, service identities, workloads, and analytical tools accessing databases; evaluate OAuth/OIDC or token-based authentication; integrate enterprise identities, security groups, and database principals; reduce reliance on shared or long-lived credentials
Design database-level controls restricting access to authorized users, groups, services, or licensing populations; implement row-level security, column-level security, dynamic masking, views, or policy-based filtering; ensure controls are enforced at the data layer, not solely dependent on application logic
Design database auditing capturing who accessed data, what, when, and which identity was used; define logging for queries, exports, failed attempts, and permission changes; integrate audit telemetry with monitoring and reporting; ensure audit records are searchable, protected, and useful for investigation
Design controls for access revocation when users change roles or licensing rights expire; design methods to identify and remove licensed data from primary stores and downstream copies; address deletion implications for backups, archives, replication, and referential integrity; define validation and evidence mechanisms
Translate requirements into architectures, technical specifications, and implementation plans; compare solution options across security, feasibility, performance, scalability, and cost; collaborate with database, IAM, security architecture, infrastructure, application, and governance teams
Select database and workflow candidates for POC; define POC architecture, test data, success criteria, and rollback approach; implement and validate authentication, fine-grained authorization, auditing, revocation, and deletion scenarios; document outcomes, limitations, and recommendations

Requirements

5+ years of relevant experience, including at least 1 year in a leadership role
Strong hands-on experience with relational databases, SQL, and database architecture, including schemas, roles, privileges, and access paths
Practical experience implementing database-level authorization, including row-level and column-level controls or fine-grained mechanisms
Strong knowledge of database authentication, IAM, OAuth 2.0, OIDC, tokens, service identities, workload identities, and secrets management
Experience designing secure database connectivity and integrations for applications, analytical tools, APIs, ETL/ELT, and data pipelines
Experience with database auditing, query/activity monitoring, centralized logging, alerting, and investigation support
Understanding of data lineage, lifecycle, retention, revocation, deletion, backup, archive, and recovery implications
Ability to evaluate heterogeneous database technologies and design platform-appropriate controls
Strong architecture, engineering, troubleshooting, documentation, and stakeholder-collaboration skills
English proficiency at an Upper-Intermediate level (B2) or higher

Nice to have

Experience with enterprise data platforms, cloud or hybrid databases, data catalogs, access governance, and policy-enforcement technologies
Experience in pharmaceutical research, scientific data, intellectual property protection, data licensing, or regulated environments
Experience designing and executing security POCs and converting validated patterns into production-ready designs
Knowledge of privacy, contractual-use restrictions, segregation, and evidence requirements affecting licensed data