Data Platform Security and Infrastructure Engineering Lead

The Data Platform Security and Infrastructure Engineering Lead will be responsible for defining and delivering the Global Demand Center Data Engineering (GDC DE) Data Platform’s Infrastructure and Data Security Strategy. The lead will establish secure development practices focusing on the principle of security by design and lead the data engineers in the team to follow secure development standards. They will drive the Data Storage Security for our data end points and Data Access Management framework, designing Role Based Action Control (RBAC) solutions to support differentiated access requirements for consumers. The lead will be partner with internal Cloud Marketing security team as well as with Multi-Customer Briefing (MCB) privacy team to proactively understand and address emerging security and privacy compliance controls and requirements. The lead will be responsible for development of tooling and processes that will enable us to effectively monitor the Platform Infrastructure, Usage and Access patterns.

Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.

In alignment with our Microsoft values, we are committed to cultivating an inclusive work environment for all employees to positively impact our culture every day.

Responsibilities

• Own/drive the Data Platform Infra and Security strategy and capability roadmap aligned to the platform vision.
• Create and implement a framework for secure data product development considering process gates and artifacts across all stages of Software Development Life Cycle (SDLC).
• Work across Data platform engineering, Data Ops and partner engineering teams to deliver secure, sustainable, performant, reliable, high-quality data through GDC DE platforms.
• Create and implement a data storage security framework and role-based access control policy across all GDC DE Data publication and access layers taking into account all consumer/publisher personas.
• Own the S360 KPIs scorecard and ensure security controls compliance for all of GDC DE platform services.
• Own the Privacy KPIs scorecard for NextGen Privacy and ensure privacy compliance for all of GDC DE platform data publishes.
• Develop and implement shared tools/capabilities for cross Azure tenants with data intake and publish.
• Develop and implement shared tools and capabilities for data tagging, data retention, archival and deletion according to Privacy policy (e.g., General Data Protection Regulation (GDPR), NextGen Privacy (NGP) requirements.
• Provide awareness and guidance to GDC DE dev, ops and Program Management team on new Microsoft security initiatives and controls and privacy policies.
• Curate a healthy backlog of capabilities and features for security and privacy compliance on GDC DE data platform and drive delivery of the backlog through vendor teams.
• Identify platform improvements based on security incident data and channel feedback to the dev team for action.
• Serve as a role model and mentor, guiding team members in producing code that is both extensible and easily maintainable, benefiting the entire team.

Other

• Embody our culture and values 

Qualifications

Required Qualifications 

• Bachelor's Degree in Computer Science, Math, Software Engineering, Computer Engineering, o