Senior Data Security Engineer

About the role:

Skydio runs its business on Palantir Foundry. Sales, operations, finance, and people teams build the apps they work in every day there. More teams start building on it every month, and more of that work now runs through AI tools that read and write company data on someone's behalf. The same platform holds compensation, customer, cost, and export-controlled data.

Our Business Data Platform team is hiring a senior engineer to own data security and access for the whole company: who can see what, why, and how we prove it. You will turn what teams need into groups, roles, and policies in Foundry, provisioned from Workday and Okta, and work with IT and Security on the identity and network side. Teams will come to you before they build with sensitive data, and your job is to get them to yes, safely and quickly. You will report to the head of Business Data Platform.

How you'll make an impact:

• Build the company's access model in Foundry: org-chart team groups provisioned from Workday through Okta, plus application and data-access groups designed around how Finance, Operations, Sales, and People use data. Access updates on its own when people join, move, or leave

• Partner with IT and Security on Okta groups, SSO, SCIM provisioning, and egress policies and credentials for data connections: bring clear requirements, agree on who owns what, and verify the result

• Keep Foundry in parity with access levels in our source systems and other data platforms, so moving data into Foundry never widens who can see it

• Protect sensitive and export-controlled data with Foundry Markings and object and property security policies, masking or redacting what a role should not see

• Administer Foundry day to day (users, groups, roles, upgrades, access reviews), and answer who has access to what, and why, with evidence that holds up to audits and customer questions

• Work with our autonomy and AI infrastructure engineers on how AI agents and coding tools connect to Foundry (MCP servers, OAuth clients, service accounts), so an agent sees only what the person using it is allowed to see

• Lead in our cross-functional Data Council, setting standards with the other business systems owners for how data is shared and protected

What makes you a good fit:

• 5+ years in data platform, data security, or infrastructure engineering, including owning access control on a data platform such as Foundry, Databricks, or Snowflake

• You have provisioned groups from an HR system and identity provider such as Workday and Okta, separated org-chart groups from application and data-access roles, and handled reorgs, contractors, and exceptions

• Production experience implementing row- and column-level security, masking and redaction, and classification-based policies

• You know SAML, SCIM, SSO, Okta, and network egress controls well enough to design with IT and Security, and you know where your ownership ends and theirs begins

• You explain access decisions to business users in plain terms, and you look for a safe way to say yes

• Strong SQL and Python, and you build with AI coding tools like Claude Code or Cursor yourself

• Palantir Foundry experience strongly preferred, especially Markings, Organizations, security policies, and project roles

• Obtaining FAA Part 107 certification within the first 60 days of employment is strongly encouraged for all Skydio employees and required for certain positions

Bonus points for:

• Databricks Unity Catalog experience

• Terraform or other infrastructure-as-code experience

• Governance work under ITAR, CMMC, or FedRAMP

Compensation: At Skydio, our compensation packages for regular, full-time employees include competitive base salaries, equity in the form of stock options, and comprehensive benefits packages. Compensation will vary based on factors, including skill level, proficiencies, transferable knowledge, and experience. Relocation assistance may also be provided for eligible roles. The annual base salary range for this position is $160,000 - $190,000*. Fundamentally, we believe that equity is the key to long-term financial growth, and we ensure all regular, full-time employees have the opportunity to significantly benefit from the company's success. Regular, full-time employees are eligible to enroll in the Company’s group health insurance plans. Regular, full-time employees are eligible to receive the following benefits: Paid vacation time, sick leave, holiday pay and 401K savings plan. This position and all associated benefits are subject to applicable federal, state, and local laws, as well as the Company’s policies and eligibility criteria.

#LI-LP1