The Saros Group

• Design and enforce RBAC/ABAC policies, SCIM provisioning, and SSO/MFA for Databricks workspaces. • Manage identity lifecycle, including onboarding/offboarding and periodic access reviews. • Integrate Databricks and AWS services with enterprise IAM solutions (e.g., Azure AD, Okta). • Implement AWS IAM roles, policies, and permission boundaries for secure data access. • Ensure secure integration between AWS, Databricks, and Microsoft Power BI for reporting. • Develop and maintain security architecture for AWS and Databricks environments supporting Power BI analytics. • Design secure data pipelines and enforce encryption in transit and at rest across AWS S3, Databricks, and Power BI. • Implement network security controls (VPC, security groups, private endpoints) for AWS and Databricks connectivity. • Lead requirements gathering sessions with stakeholders to define security needs for AWS, Databricks, and Power BI integrations. • Document security requirements, architecture diagrams, and implementation plans. • Maintain detailed security design documentation and update as environments evolve. • Investigate and respond to IAM-related and platform security incidents and defects. • Ensure adherence to SOC 2, HIPAA, GDPR, and internal security standards across AWS and Databricks. • Implement data governance policies for sensitive data used in Power BI reporting. • Apply Databricks Security Profile features (CIS-hardened images, FIPS 140 encryption, TLS 1.2+). • Validate secure cluster configurations and enforce encryption policies in Databricks and AWS. • Harden AWS services (EC2, S3, IAM) following CIS benchmarks and best practices. • Partner with data engineering, BI, and cloud teams to implement security best practices. • Provide security posture reports and IAM metrics to leadership. • Support secure integration of Power BI with AWS and Databricks for enterprise reporting.