Job description

Cargill is committed to providing food and agricultural solutions to nourish the world in a safe, responsible, and sustainable way. Sitting at the heart of the supply chain, we partner with farmers and customers to source, make and deliver products that are vital for living. Our 155,000 team members innovate with purpose, providing customers with life’s essentials so businesses can grow, communities prosper, and consumers live well. With over 160 years of experience as a family company, we look ahead while remaining true to our values. We put people first. We reach higher. We do the right thing—today and for generations to come. Job Purpose and Impact • The Data Security Architect will drive the enterprise data protection strategy and design scalable, secure architectures that safeguard critical business, operational, and manufacturing data across cloud, SaaS, and hybrid environments. In this role, you will apply deep expertise in data security, cloud architecture, and governance to design scalable, secure solutions that protect sensitive enterprise, operational, and manufacturing data. You will partner with cloud, data, application, and OT teams to embed security design into IaaS, PaaS, SaaS, data platforms and OT ecosystems while mentoring engineers and influencing senior stakeholders. Key Accountabilities • Develop and maintain enterprise data security architecture standards, patterns, and roadmaps to protect sensitive enterprise, operational, and manufacturing data. • Design and implement data protection controls across AWS and Azure, including data classification, encryption, key management, DLP/DSPM, data activity monitoring, and structured and unstructured data access governance • Define secure data architecture patterns for data lakes, analytics platforms, ERP systems, SaaS applications, and AI/ML workloads • Architect secure data flows between enterprise IT and OT/manufacturing systems (ERP, MES, SCADA,etc.) • Partner with Enterprise Architecture, Cloud Engineering, Data Engineering, DevOps, Application Security, Compliance, and OT Security teams to embed data security into platform architecture and lifecycle processes • Provide technical leadership and mentorship to security engineers and analysts • Evaluate new data security tools, technologies, and controls, and contribute to vendor strategy and standards. Qualifications • Minimum requirement of 4 years of relevant work experience. Typically reflects 5 years or more of relevant experience. • Bachelor’s degree in Computer science, Information Security, Engineering, or equivalent practical experience. • Minimum of eight years of related work experience in cybersecurity, with strong focus on data security and cloud architecture • Proven experience designing secure data architectures in AWS and/or Azure environments • Experience with Data Loss Prevention (DLP), data classification, and data governance technologies • Good understanding of Identity and Access Management (IAM), Privileged Access Management (PAM), and Zero Trust architecture • Experience in securing cloud-native data services, storage solutions, and integration patterns (APIs, ETL/ELT pipelines) • Knowledge of encryption (at rest, in transit, in use), key management solutions, and secrets management • Understanding of enterprise applications (ERP, supply chain systems) and data protection considerations • Ability to lead architectural discussions and influence technical and business stakeholders • Strong analytical, problem-solving, and communication skills Preferred qualifications, capabilities and skills: • Certifications such as CISSP, CCSP, SABSA, AWS/Azure Security Specialty, or TOGAF • Experience securing data in manufacturing or OT environments • Experience supporting large-scale cloud migration or modernization programs • Experience with DSPM, CASB, or cloud-native data protection tooling across multi-cloud environments is a plus #HiPo Equal Opportunity Employer, including Disability/Vet.

Requirements

Must-haves

Job Purpose and Impact
Key Accountabilities
Develop and maintain enterprise data security architecture standards, patterns, and roadmaps to protect sensitive enterprise, operational, and manufacturing data.
Design and implement data protection controls across AWS and Azure, including data classification, encryption, key management, DLP/DSPM, data activity monitoring, and structured and unstructured data access governance
Define secure data architecture patterns for data lakes, analytics platforms, ERP systems, SaaS applications, and AI/ML workloads
Architect secure data flows between enterprise IT and OT/manufacturing systems (ERP, MES, SCADA,etc.)
Partner with Enterprise Architecture, Cloud Engineering, Data Engineering, DevOps, Application Security, Compliance, and OT Security teams to embed data security into platform architecture and lifecycle processes
Provide technical leadership and mentorship to security engineers and analysts
Evaluate new data security tools, technologies, and controls, and contribute to vendor strategy and standards.
Minimum requirement of 4 years of relevant work experience. Typically reflects 5 years or more of relevant experience.
Bachelor’s degree in Computer science, Information Security, Engineering, or equivalent practical experience.
Minimum of eight years of related work experience in cybersecurity, with strong focus on data security and cloud architecture
Proven experience designing secure data architectures in AWS and/or Azure environments
Experience with Data Loss Prevention (DLP), data classification, and data governance technologies
Good understanding of Identity and Access Management (IAM), Privileged Access Management (PAM), and Zero Trust architecture
Experience in securing cloud-native data services, storage solutions, and integration patterns (APIs, ETL/ELT pipelines)
Knowledge of encryption (at rest, in transit, in use), key management solutions, and secrets management
Understanding of enterprise applications (ERP, supply chain systems) and data protection considerations
Ability to lead architectural discussions and influence technical and business stakeholders
Strong analytical, problem-solving, and communication skills
Certifications such as CISSP, CCSP, SABSA, AWS/Azure Security Specialty, or TOGAF
Experience securing data in manufacturing or OT environments

Nice-to-haves

Preferred qualifications, capabilities and skills:
Experience with DSPM, CASB, or cloud-native data protection tooling across multi-cloud environments is a plus

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

awsazureaimlrest

Platform: radancy
Effort: medium