Principal Solution Architect - Data Platform Security

JoinphData, a remote-first data and AI consultancy company with employees across the United States, Latin America, and India. We partner with industry leaders, including Snowflake, AWS, Anthropic, Glean, and dbt, to solve the complex data and AI challenges that slow large enterprises.

We're growing fast, and we give our people real ownership over their work. We hire top performers and trust them to deliver results.

We are looking for a Principal Solution Architect to join our Managed Services team. In this role, you will lead the architecture, security posture, and continuous improvement of enterprise Snowflake platforms for complex, security-sensitive clients. You will own the loop from threat detection through remediation and serve as a senior technical leader across platform security, governance, and operational resilience.

You will collaborate closely with client stakeholders, internal engineers, security teams, and practice leadership to define enforceable standards, operate proactive monitoring and alerting pipelines, and guide key decisions across access, governance, network security, identity, and data protection. You will also help strengthen phData’s managed Snowflake offerings by improving processes, automation, and reusable patterns that increase the quality and scalability of secure managed services delivery.

Lead the architecture, hardening, and continuous security improvement of enterprise Snowflake platforms across complex, security-sensitive client environments, ensuring strong controls, resilience, and long-term maintainability.

Translate business, security, and technical requirements into operating models, roadmaps, and engineering work that strengthen platform controls, access patterns, governance, and secure delivery practices.

Design and lead proactive monitoring, alerting, and threat detection across Snowflake environments using native audit and telemetry data, integrating with SIEM or similar platforms to detect, investigate, and remediate anomalous or unauthorized activity.

Use threat modeling and attack-path analysis to identify and remediate risk across access models, data sharing, network controls, identity posture, third-party integrations, service accounts, secrets management, and configuration drift.

Guide architectural and operational decisions across governance, authentication, privileged access, network security, and data protection, balancing platform risk, business priorities, compliance requirements, and performance goals.

Serve as a trusted advisor and senior technical leader across client stakeholders, internal engineers, and partner teams, clearly communicating trade-offs, platform risks, and remediation plans while guiding difficult decisions in complex environments.

Contribute to and improve managed services standards by creating automation, runbooks, accelerators, and best practices that enhance the quality, consistency, and scalability of secure Snowflake operations.

Lead cross-functional teams and mentor engineers while helping mature phData’s secure managed services delivery model.

You are a client-focused security engineer and technical leader who thrives in fast-paced, high-accountability environments with complex Snowflake platforms and evolving threat landscapes.

You are comfortable operating in distributed, global teams and partnering with colleagues across time zones. You enjoy finding the risks others miss, thinking in threat models, operating proactive detection pipelines, and owning the full loop from identifying risk to closing it. You bring strong executive presence, sound judgment, and clear communication to security-sensitive client work.

15+ years of experience in cloud and data infrastructure, including significant experience in security engineering, platform security, or security operations roles.

Significant production experience with Snowflake, including platform architecture, administration, security design, and operational governance in complex enterprise environments.

Deep expertise in Snowflake platform security, including role-based access control, managed access, secure data sharing, account guardrails, privileged access controls, governance patterns, and data protection controls such as masking and row- or column-level access.

Hands-on experience with Snowflake audit and telemetry data, including sources such as ACCOUNT_USAGE views like ACCESS_HISTORY, QUERY_HISTORY, LOGIN_HISTORY, and POLICY_EVENTS, for investigation, anomaly detection, and control validation.

Experience integrating Snowflake audit logs, platform logs, and security events into SIEM or similar monitoring platforms such as Splunk, Microsoft Sentinel, CrowdStrike, or Datadog, including designing log pipelines, detection rules, escalation workflows, and remediation processes.

Strong technical depth across network, identity, authentication, secrets management, and service account lifecycle controls relevant to Snowflake and cloud data platforms, including private endpoints, VPC or VNet peering, PrivateLink, IP allowlisting, MFA, SSO or SAML, OAuth token scoping, key pair authentication, and credential rotation policies.

Hands-on experience with secrets managers and related tooling such as AWS Secrets Manager, HashiCorp Vault, or Azure Key Vault.

Strong working experience with SQL, Infrastructure as Code, Python automation, and CI/CD to support secure platform delivery and repeatable operational controls.

Experience delivering managed services or consulting engagements in complex enterprise environments, with the ability to break down multifaceted platform and security challenges into structured, actionable work.

Bachelor’s degree in Computer Science, Engineering, or a related field, or equivalent practical experience.

Snowflake certifications, including SnowPro Core and one or more advanced certifications.

Security certifications such as CISSP, CEH, AWS Security Specialty, or equivalent.

Prior experience in highly regulated industries such as life sciences, healthcare, or financial services, including environments with compliance requirements such as SOC 2, HIPAA, or PCI-DSS.

Experience in managed services environments supporting multiple customer accounts and distributed global teams.

Contributions to technical communities through writing, speaking, internal accelerators, or reusable security assets.

Values-Driven: We prioritize doing the right thing for our clients, our teams, and our community.

Competitive compensation, excellent benefits, 4 weeks PTO, plus 10 holidays and additional perks

phData celebrates diversity and is committed to creating an inclusive environment for all employees. Our approach helps us to build a winning team that represents a variety of backgrounds, perspectives, and abilities. So, regardless of how your diversity expresses itself, you can find a home here at phData. We are proud to be an equal opportunity employer. We prohibit discrimination and harassment of any kind based on race, color, religion, national origin, sex (including pregnancy), sexual orientation, gender identity, gender expression, age, veteran status, genetic information, disability, or other applicable legally protected characteristics. If you would like to request an accommodation due to a disability, please contact us at People Operations.

- 10+ years of experience in data architecture, with a focus on Snowflake platform design and implementation

- Proven expertise in enterprise security, including threat detection, remediation, and security posture management

- Strong background in governance, access control, identity management, and data protection within cloud data platforms

- Ability to collaborate with cross-functional teams, including security, engineering, and client stakeholders

- Familiarity with cloud ecosystems (AWS, Azure) and data/AI tools (e.g., dbt, Fivetran, Anthropic) is preferred