Lead Data Security Engineer

Responsibilities

• Design, implement, and maintain security controls using Microsoft Entra ID
• Manage and configure Entra ID security groups, Privileged Identity Management (PIM), and Conditional Access policies
• Oversee and streamline the enterprise access request and approval workflows
• Establish and monitor comprehensive audit logging and retention frameworks
• Oversee logging across Entra sign-in logs, PIM activity, service principal activity, and Fabric audit logs to ensure robust threat detection and compliance tracking
• Administer service principal and secret lifecycle management securely via Azure Key Vault
• Ensure adherence to rotation schedules, least-privilege principles, and secure credential handling
• Implement robust export controls across Microsoft Fabric and Power BI
• Enforce sensitivity-label policies on exported content to prevent unauthorized data exfiltration
• Build and maintain granular row-level security (RLS) and column-level security (CLS) across Fabric Lakehouse and Warehouse items

Languages