Staff Production Engineer- Public Sector

The role

You will own and evolve secure infrastructure, access patterns, and guardrails for the global platform. You will operate the sovereign layer of infrastructure to ensure reliability and security in regulated and air-gapped environments.

What you will do

• Design, automate, and operate IAM, account/subscription, and project lifecycle across AWS, Azure, and GCP.
• Review, implement, and improve cloud identity and access policies.
• Build and maintain automation and tooling to apply cloud changes.
• Eliminate toil and drive root-cause analysis for operational and security issues.
• Own and improve security and audit logging data pipelines.
• Partner with Security, Compliance, and Audit teams to provide evidence and policy updates.
• Operate and improve specialized, highly regulated environments like FedRAMP / GovCloud.
• Ensure high availability and resiliency for critical security and access infrastructure.
• Participate in a 24x7 on-call rotation for high-severity incidents.
• Partner with product engineering, security engineering, and field teams during incidents.

Required qualifications

• Active Top Secret / Sensitive Compartmented Information (TS/SCI) security clearance.
• BS, MS, or PhD in Computer Science, Engineering, or a related technical field, or equivalent practical experience.
• 8+ years of experience operating and automating large-scale cloud environments.
• Deep hands-on experience with at least one major cloud provider (AWS, Azure, or GCP) in areas such as IAM, networking, accounts/subscriptions/projects, and audit logging.
• Strong background in Infrastructure-as-Code and automation (e.g., Terraform, CloudFormation, or similar) and CI/CD for infrastructure changes.
• Proven experience working in or with security-sensitive or regulated environments (e.g., SOC2, FedRAMP, ISO 27001, financial services, public sector).
• Familiarity with access review processes, policy baselines, and audit evidence for cloud environments.
• Demonstrated success running high-availability, security-critical services, including on-call responsibilities and incident management.
• Strong debugging and problem-solving skills across distributed systems.

Nice to have

• Possession of a current polygraph (Counterintelligence or Full Scope)
• Experience with Okta, Opal, or similar identity/access tooling
• Background operating secure admin workstations (SAW) or comparable hardened access patterns
• Experience migrating cloud accounts or subscriptions during M&A or large-scale reorganizations

Benefits

• Annual performance bonus
• Equity

Before you apply

• Candidates must have active Top Secret / Sensitive Compartmented Information (TS/SCI) security clearance.

About the company

Databricks is the Data and AI company. More than 20,000 organizations worldwide rely on the Databricks Data + AI Platform to build and scale data and AI apps, analytics and agents.