Senior Data Security Engineer

Skydio•San Mateo, CA

1d•$160,000 - $190,000

About The Position

Skydio is hiring a senior engineer on its Business Data Platform team to own company-wide data security and access in Palantir Foundry. The role designs and maintains groups, roles, and policies so employees and AI tools can access only the company data they are authorized to use. Access is provisioned from Workday through Okta, with collaboration across IT and Security on identity, network, and data-connection controls. The position reports to the Head of Business Data Platform. The engineer will help teams use sensitive data safely and efficiently, maintain access parity with source systems and other data platforms, protect sensitive and export-controlled information, and provide evidence of access decisions for audits and customer inquiries. The role also partners with autonomy and AI infrastructure engineers on secure connections between Foundry and AI agents and coding tools, and contributes to data-sharing standards through the cross-functional Data Council.

Requirements

At least 5 years of experience in data platform, data security, or infrastructure engineering.
Experience owning access control on a data platform such as Foundry, Databricks, or Snowflake.
Experience provisioning groups from an HR system and identity provider such as Workday and Okta.
Experience separating org-chart groups from application and data-access roles and handling reorganizations, contractors, and exceptions.
Production experience implementing row- and column-level security, masking and redaction, and classification-based policies.
Knowledge of SAML, SCIM, SSO, Okta, and network egress controls sufficient to design with IT and Security and define ownership boundaries.
Ability to explain access decisions clearly to business users and identify safe ways to enable access.
Strong SQL and Python skills.
Experience building with AI coding tools such as Claude Code or Cursor.
Obtain FAA Part 107 certification within the first 60 days of employment; strongly encouraged for all Skydio employees and required for certain positions, but the posting does not specify whether this position is among them.

Nice To Haves

Palantir Foundry experience, especially Markings, Organizations, security policies, and project roles.
Databricks Unity Catalog experience.
Terraform or other infrastructure-as-code experience.
Governance experience under ITAR, CMMC, or FedRAMP.

Responsibilities

Build and maintain the company’s Foundry access model, including org-chart groups provisioned from Workday through Okta and application and data-access groups tailored to business teams.
Ensure access updates automatically when employees join, move, or leave the company.
Partner with IT and Security on Okta groups, SSO, SCIM provisioning, egress policies, and credentials for data connections; clarify ownership and verify implementations.
Maintain parity between Foundry access levels and those in source systems and other data platforms so that data transfers do not broaden access.
Protect sensitive and export-controlled data using Foundry Markings and object- and property-level security policies, including masking or redaction.
Administer Foundry, including users, groups, roles, upgrades, and access reviews.
Provide evidence-based explanations of who has access to what and why for audits and customer questions.
Work with autonomy and AI infrastructure engineers to secure AI-agent and coding-tool connections to Foundry, including MCP servers, OAuth clients, and service accounts, ensuring agents inherit the user’s access limits.
Lead participation in the cross-functional Data Council and set data-sharing and protection standards with other business-systems owners.
Help business teams safely and promptly use sensitive data by advising them before they build with it.