Staff Production Engineer- Public Sector

Databricks · Virginia · Engineering · listed April 22, 2026

The shape of it

Seniority
Staff
Experience asked
8+ years
Where
Not stated
Stated pay
$162,000 – $222,750 USD
Requirements listed
14
Length
1,095 words

In the posting’s own words

In this role, you won’t just run our cloud environments; you will own and evolve the secure infrastructure, access patterns, and guardrails that keep Databricks’ global platform safe and compliant in production. You will be responsible for the "sovereign layer" of our infrastructure, ensuring that our Data Intelligence Platform operates with 100% reliability and security in highly regulated, air-gapped, and sovereign environments. If you are an engineer who views infrastructure as a software problem and thrives on the complexity of global-scale networking, IAM, and automation, this is your team.

What it asks for · 14

  • Required: Candidates must hold a current TS/SCI clearance (either active or currently held in an editable/re-activatable status within the 2-year window).
  • Nice to have: Possession of a current polygraph (Counterintelligence or Full Scope) is highly desired and considered a significant plus.
  • Education- BS, MS, or PhD in Computer Science, Engineering, or a related technical field, or equivalent practical experience.
  • Experience
  • Staff : 8+ years of experience operating and automating large-scale cloud environments, with a track record of driving cross-team infrastructure improvement.
  • Cloud & Infrastructure Expertise
  • Deep hands-on experience with at least one major cloud provider ( AWS, Azure, or GCP ) in areas such as IAM, networking, accounts/subscriptions/projects, and audit logging.
  • Strong background in Infrastructure-as-Code and automation (e.g., Terraform, CloudFormation, or similar) and CI/CD for infrastructure changes.
  • Security & Compliance Mindset
  • Proven experience working in or with security-sensitive or regulated environments (e.g., SOC2, FedRAMP, ISO 27001, financial services, public sector) and translating requirements into concrete technical controls.
  • Familiarity with access review processes, policy baselines, and audit evidence for cloud environments.
  • Operational Excellence
  • Demonstrated success running high-availability, security-critical services , including on-call responsibilities and incident management.
  • Strong debugging and problem-solving skills across distributed systems, with the ability to navigate ambiguous issues spanning multiple teams and platforms.

Also a plus

  • Experience with Okta, Opal, or similar identity/access tooling .
  • Background operating secure admin workstations (SAW) or comparable hardened access patterns.
  • Experience migrating cloud accounts or subscriptions during M&A or large-scale reorganizations .

Degree language

  • Education- BS, MS, or PhD in Computer Science, Engineering, or a related technical field, or equivalent practical experience.

Tools and skills named

Security & compliance
  • Security13×
  • Audit5×
  • IAM5×
  • SOC 2
Cloud & infra
  • AWS3×
  • Azure3×
  • GCP3×
  • CI/CD
  • Distributed systems
  • Terraform
Data
  • Data pipelines3×
  • Databricks3×
Ways of working
  • On-call3×

Words the posting leans on

  • cloud14×
  • security10×
  • infrastructure8×
  • access7×
  • experience7×
  • audit6×
  • engineering5×
  • iam5×
  • automation4×
  • e.g4×
  • incident4×
  • platform4×
  • regulated4×
  • access patterns3×
  • aws azure3×
  • data pipelines3×

Counted from the posting after the mission statement and the legal notices are set aside. The ones near the top are the ones a screener is looking for.

The posting, your resume, and the gaps between them. One click loads all three.

More open at Databricks

every open role at Databricks

How this page was made

An automated read of a public job posting, fetched August 25, 2026 and last changed by Databricks on August 18, 2026. Every list above is pulled from the posting’s own sentences — nothing rewritten, nothing added, no judgment about the role or the company. Counts and seniority are read off the text by rule, so they can be wrong where the posting is unusual. The original is the only thing that binds. Openings close without warning; check the source before spending an evening on it.