Senior Data Engineer role for Data Org, Semantic Layer
Job Location:
Job Location:
Frisco, TX - USA
Monthly Salary:
Not Disclosed
Monthly Salary:
Posted on:
Yesterday
Posted on:
Vacancies:
1 Vacancy
Vacancies:
Job Summary
Main Responsibilities Semantic Layer Engineering (Microsoft Fabric)
Design and develop the enterprise Semantic Layer in Microsoft Fabric including data models calculated metrics hierarchies and relationships that serve as the single source of truth for reporting and analytics. Structure semantic models to enforce Row-Level Security (RLS) and Object-Level Security (OLS) aligned with access control policies and least-privilege principles.
Build and maintain reusable versioned metric definitions using DAX and Fabric-native capabilities to ensure consistency across business domains.
Optimize query performance of semantic models for large-scale datasets including Netezza source systems.
Develop and maintain data pipelines that feed the semantic layer ensuring lineage freshness and accuracy of data.
SOX Compliance & Financial Data Governance Architect semantic layer models to support SOX (Sarbanes-Oxley Act) compliance including clear segregation of duties audit trail capabilities and controls over financially significant data.
Design access control structures that enforce SOX-mandated user access reviews ensuring only authorized personnel can view or modify financial data within the semantic layer.
Implement and maintain data lineage tracking from source systems through to semantic layer metrics to support SOX audit evidence requirements.
Collaborate with Internal Audit and Finance teams to document data controls support control testing and respond to audit requests related to data systems.
Ensure all changes to financially significant models and metrics follow a change management process with appropriate approvals and documentation.
Support periodic user access reviews and produce reports to satisfy SOX IT General Controls (ITGC) requirements.
USGCI Handling within the Semantic Layer Engineer data segmentation and access isolation strategies to ensure US Government Customer Information (USGCI) within the semantic layer is handled in strict compliance with T-Mobiles National Security Agreement (NSA) obligations.
Design and implement semantic layer access tiers that prevent USGCI data from being surfaced to unauthorized users offshore teams or non-approved environments.
Work with the Network Compliance Office (NCO) and data owners to define and enforce USGCI data classification tagging within Fabric data assets.
Ensure USGCI data elements (including customer/agency identifiers network access identifiers circuit physical addresses and contract types) are masked restricted or excluded from general-purpose semantic models.
Maintain documentation of USGCI data flows through the semantic layer to support NSA compliance audits and reporting.
Proactively identify and escalate any semantic layer configurations pipelines or reports that may inadvertently expose USGCI data.
Data Engineering & Pipeline Development Develop data engineering solutions that enable data pipelines visualization and analytical tools to support business requirements.
Design and develop data architectures across on-premise cloud and hybrid platforms (AWS Azure Google Cloud Microsoft Fabric) to ensure scalable data infrastructure.
Perform data wrangling exploration and discovery of heterogeneous data sources including Oracle SQL Server and Netezza to generate new business insights.
Build and optimize complex data pipelines using Python SQL DAX Java Scala and/or Go. Design and develop solutions using SQL NoSQL and relational database patterns; migrate data to cloud platforms as needed.
IT Security & Infrastructure Apply in-depth IT security best practices in large-scale enterprise environments including encryption at rest and in transit tokenization and secure API design.
Apply high-level design architecture knowledge across security technologies networking web services and Service-Oriented Architecture (SOA) to ensure data solutions are resilient and secure.
Design and review infrastructure and application components across OS environments (Unix Windows Linux) and RDBMS platforms (Oracle SQL Server Netezza) with security as a first principle.
Partner with Cybersecurity and Infrastructure teams to ensure semantic layer components meet T-Mobile security standards and pass security architecture reviews. Identify and remediate security gaps in data pipelines access models and API integrations.
Team Leadership & Enablement Contribute to team knowledge sharing and drive the advancement of new data engineering capabilities.
Mentor team members to build and enhance their data engineering skills with a focus on governance compliance and secure data practices.
Assist management in project definition including estimating planning and scoping work to meet objectives.
Also responsible for other duties and projects as assigned by business management.
Approximate Time Allocation Responsibility Area % of Time Semantic layer engineering & model development (Fabric) 25% SOX compliance governance & audit support 15% USGCI handling segmentation & NSA compliance 10% Data pipelines wrangling & cloud architecture 20% IT security design & infrastructure 10% Team mentoring knowledge sharing & project planning 20%
Required Experience
4-7 yrs Developing cloud solutions using data services; hands-on with AWS Azure Microsoft Fabric or Google Cloud
4-7 yrs Hands-on development and migration of data to cloud platforms X
4-7 yrs SQL NoSQL and relational database design; experience with Oracle SQL Server Netezza
4-7 yrs Building complex data pipelines using Python SQL DAX Java Scala and/or Go
3-5 yrs Designing and building semantic models or data warehouses for enterprise-scale analytics
3-5 yrs Implementing data governance frameworks including data lineage cataloging and access control in a regulated environment
3-5 yrs SOX compliance activities: IT General Controls (ITGC) audit support segregation of duties and change management for data systems
2-4 yrs IT security best practices in large-scale environments: encryption tokenization secure API design least-privilege access and security architecture review
2-4 yrs Infrastructure and application design across OS environments (Unix Windows Linux) and RDBMS platforms
2-4 yrs High-level design architecture across security technologies networking web services and SOA in enterprise environments
2-4 yrs USGCI data handling NSA/CFIUS compliance or equivalent regulated government data programs
Any Microsoft Fabric (Lakehouse Warehouse Dataflows DirectLake) Power BI and Microsoft Purview
Preferred Certifications & Additional Skills
Microsoft Certified:
Azure Data Engineer Associate (DP-203) or equivalent cloud data certification.
Experience designing Row-Level Security (RLS) and Object-Level Security (OLS) in Power BI or Analysis Services semantic models.
Familiarity with data classification and tagging frameworks in regulated industries. Knowledge of CPNI (Customer Proprietary Network Information) handling requirements in addition to USGCI.
Experience working directly with Internal Audit external auditors or compliance teams on data control
Design and develop the enterprise Semantic Layer in Microsoft Fabric including data models calculated metrics hierarchies and relationships that serve as the single source of truth for reporting and analytics. Structure semantic models to enforce Row-Level Security (RLS) and Object-Level Security (OLS) aligned with access control policies and least-privilege principles.
Build and maintain reusable versioned metric definitions using DAX and Fabric-native capabilities to ensure consistency across business domains.
Optimize query performance of semantic models for large-scale datasets including Netezza source systems.
Develop and maintain data pipelines that feed the semantic layer ensuring lineage freshness and accuracy of data.
SOX Compliance & Financial Data Governance Architect semantic layer models to support SOX (Sarbanes-Oxley Act) compliance including clear segregation of duties audit trail capabilities and controls over financially significant data.
Design access control structures that enforce SOX-mandated user access reviews ensuring only authorized personnel can view or modify financial data within the semantic layer.
Implement and maintain data lineage tracking from source systems through to semantic layer metrics to support SOX audit evidence requirements.
Collaborate with Internal Audit and Finance teams to document data controls support control testing and respond to audit requests related to data systems.
Ensure all changes to financially significant models and metrics follow a change management process with appropriate approvals and documentation.
Support periodic user access reviews and produce reports to satisfy SOX IT General Controls (ITGC) requirements.
USGCI Handling within the Semantic Layer Engineer data segmentation and access isolation strategies to ensure US Government Customer Information (USGCI) within the semantic layer is handled in strict compliance with T-Mobiles National Security Agreement (NSA) obligations.
Design and implement semantic layer access tiers that prevent USGCI data from being surfaced to unauthorized users offshore teams or non-approved environments.
Work with the Network Compliance Office (NCO) and data owners to define and enforce USGCI data classification tagging within Fabric data assets.
Ensure USGCI data elements (including customer/agency identifiers network access identifiers circuit physical addresses and contract types) are masked restricted or excluded from general-purpose semantic models.
Maintain documentation of USGCI data flows through the semantic layer to support NSA compliance audits and reporting.
Proactively identify and escalate any semantic layer configurations pipelines or reports that may inadvertently expose USGCI data.
Data Engineering & Pipeline Development Develop data engineering solutions that enable data pipelines visualization and analytical tools to support business requirements.
Design and develop data architectures across on-premise cloud and hybrid platforms (AWS Azure Google Cloud Microsoft Fabric) to ensure scalable data infrastructure.
Perform data wrangling exploration and discovery of heterogeneous data sources including Oracle SQL Server and Netezza to generate new business insights.
Build and optimize complex data pipelines using Python SQL DAX Java Scala and/or Go. Design and develop solutions using SQL NoSQL and relational database patterns; migrate data to cloud platforms as needed.
IT Security & Infrastructure Apply in-depth IT security best practices in large-scale enterprise environments including encryption at rest and in transit tokenization and secure API design.
Apply high-level design architecture knowledge across security technologies networking web services and Service-Oriented Architecture (SOA) to ensure data solutions are resilient and secure.
Design and review infrastructure and application components across OS environments (Unix Windows Linux) and RDBMS platforms (Oracle SQL Server Netezza) with security as a first principle.
Partner with Cybersecurity and Infrastructure teams to ensure semantic layer components meet T-Mobile security standards and pass security architecture reviews. Identify and remediate security gaps in data pipelines access models and API integrations.
Team Leadership & Enablement Contribute to team knowledge sharing and drive the advancement of new data engineering capabilities.
Mentor team members to build and enhance their data engineering skills with a focus on governance compliance and secure data practices.
Assist management in project definition including estimating planning and scoping work to meet objectives.
Also responsible for other duties and projects as assigned by business management.
Approximate Time Allocation Responsibility Area % of Time Semantic layer engineering & model development (Fabric) 25% SOX compliance governance & audit support 15% USGCI handling segmentation & NSA compliance 10% Data pipelines wrangling & cloud architecture 20% IT security design & infrastructure 10% Team mentoring knowledge sharing & project planning 20%
Required Experience
4-7 yrs Developing cloud solutions using data services; hands-on with AWS Azure Microsoft Fabric or Google Cloud
4-7 yrs Hands-on development and migration of data to cloud platforms X
4-7 yrs SQL NoSQL and relational database design; experience with Oracle SQL Server Netezza
4-7 yrs Building complex data pipelines using Python SQL DAX Java Scala and/or Go
3-5 yrs Designing and building semantic models or data warehouses for enterprise-scale analytics
3-5 yrs Implementing data governance frameworks including data lineage cataloging and access control in a regulated environment
3-5 yrs SOX compliance activities: IT General Controls (ITGC) audit support segregation of duties and change management for data systems
2-4 yrs IT security best practices in large-scale environments: encryption tokenization secure API design least-privilege access and security architecture review
2-4 yrs Infrastructure and application design across OS environments (Unix Windows Linux) and RDBMS platforms
2-4 yrs High-level design architecture across security technologies networking web services and SOA in enterprise environments
2-4 yrs USGCI data handling NSA/CFIUS compliance or equivalent regulated government data programs
Any Microsoft Fabric (Lakehouse Warehouse Dataflows DirectLake) Power BI and Microsoft Purview
Preferred Certifications & Additional Skills
Microsoft Certified:
Azure Data Engineer Associate (DP-203) or equivalent cloud data certification.
Experience designing Row-Level Security (RLS) and Object-Level Security (OLS) in Power BI or Analysis Services semantic models.
Familiarity with data classification and tagging frameworks in regulated industries. Knowledge of CPNI (Customer Proprietary Network Information) handling requirements in addition to USGCI.
Experience working directly with Internal Audit external auditors or compliance teams on data control
