Sr. Analytics Engineer

Position Summary

The Sr Analytics Engineer architects, builds, and operates secure, scalable data pipelines and analytics integrations within a governed AWS cloud environment. This role carries direct accountability for data quality, privacy-preserving engineering, and compliance with HIPAA, SOC 2, GDPR, and CCPA. The individual serves as the technical authority on analytics engineering standards and partners with Security, Legal, and Compliance teams to ensure all data products meet enterprise governance requirements.

AWS Technology Stack

Deep hands-on expertise required across the following AWS service areas:

• Data Storage & Lake: S3, Lake Formation, Glue Data Catalog, DynamoDB
• Processing & ETL: Glue (PySpark), Lambda, Step Functions, EMR
• Analytics & Query: Athena, Redshift / Redshift Serverless, QuickSight
• Integration & Streaming: Kinesis, API Gateway, Transfer Family, AppFlow
• Security & Encryption: KMS, IAM, Secrets Manager, Macie, GuardDuty, CloudTrail
• Monitoring & Compliance: CloudWatch, AWS Config, X-Ray, Systems Manager
• Networking & Isolation: VPC, PrivateLink, AWS Clean Rooms

Governance & Compliance Responsibilities Regulatory Compliance

• Design data architectures compliant with HIPAA (PHI encryption, minimum necessary access, audit retention), GDPR/CCPA (DSAR automation, right-to-erasure, consent management), SOC 2 Type II (access reviews, change management, continuous monitoring), and PCI DSS where applicable.
• Implement data residency and sovereignty controls ensuring data remains within approved AWS Regions.

Data Governance & Quality

• Enforce data classification standards (Public, Internal, Confidential, Restricted) via Macie and Lake Formation LF-Tags. Implement automated data quality frameworks with freshness, completeness, and accuracy SLAs.
• Maintain data lineage documentation, data retention/purge policies via S3 Lifecycle Rules and DynamoDB TTL, and participate in Data Governance Council reviews and compliance audits.

Security & Access Governance

• Implement least-privilege access models with quarterly reviews, IAM Access Analyzer scans, and encryption-at-rest/in-transit standards with KMS key policy management.
• Design masking, tokenization, and anonymization pipelines for non-production environments. Enforce IaC governance via CloudFormation/Terraform with security review gates and drift detection.