Sr. Data Engineer(Microsoft with Fabric)
Location: Frisco/Atlanta/KS
Duration: 7 Months Job Type: Temporary Assignment Work Type: Onsite
Job Description: Main Responsibilities:
- Design and develop the enterprise Semantic Layer in Microsoft Fabric, including data models, calculated metrics, hierarchies, and relationships that serve as the single source of truth for reporting and analytics.
- Structure semantic models to enforce Row-Level Security (RLS) and Object-Level Security (OLS) aligned with access control policies and least-privilege principles.
- Build and maintain reusable, versioned metric definitions using DAX and Fabric-native capabilities to ensure consistency across business domains.
- Optimize query performance of semantic models for large-scale datasets, including Netezza source systems.
- Develop and maintain data pipelines that feed the semantic layer, ensuring lineage, freshness, and accuracy of data.
- SOX Compliance & Financial Data Governance Architect semantic layer models to support SOX (Sarbanes-Oxley Act) compliance, including clear segregation of duties, audit trail capabilities, and controls over financially significant data.
- Design access control structures that enforce SOX-mandated user access reviews, ensuring only authorized personnel can view or modify financial data within the semantic layer.
- Implement and maintain data lineage tracking from source systems through to semantic layer metrics to support SOX audit evidence requirements.
- Collaborate with Internal Audit and Finance teams to document data controls, support control testing, and respond to audit requests related to data systems.
- Ensure all changes to financially significant models and metrics follow a change management process with appropriate approvals and documentation.
- Support periodic user access reviews and produce reports to satisfy SOX IT General Controls (ITGC) requirements.
- USGCI Handling within the Semantic Layer Engineer data segmentation and access isolation strategies to ensure Customer Information (USGCI) within the semantic layer is handled in strict compliance with T-Mobile's National Security Agreement (NSA) obligations.
- Design and implement semantic layer access tiers that prevent USGCI data from being surfaced to unauthorized users, offshore teams, or non-approved environments.
- Work with the Network Compliance Office (NCO) and data owners to define and enforce USGCI data classification tagging within Fabric data assets.
- Ensure USGCI data elements (including customer/agency identifiers, network access identifiers, circuit physical addresses, and contract types) are masked, restricted, or excluded from general-purpose semantic models.
- Maintain documentation of USGCI data flows through the semantic layer to support NSA compliance audits and reporting.
- Proactively identify and escalate any semantic layer configurations, pipelines, or reports that may inadvertently expose USGCI data.
- Data Engineering & Pipeline Development Develop data engineering solutions that enable data pipelines, visualization, and analytical tools to support business requirements.
- Design and develop data architectures across on-premise, cloud, and hybrid platforms (AWS, Azure, Google Cloud, Microsoft Fabric) to ensure scalable data infrastructure.
- Perform data wrangling, exploration, and discovery of heterogeneous data sources including Oracle, SQL Server, and Netezza, to generate new business insights.
- Build and optimize complex data pipelines using Python, SQL, DAX, Java, Scala, and/or Go.
- Design and develop solutions using SQL, NoSQL, and relational database patterns; migrate data to cloud platforms as needed.
- IT Security & Infrastructure Apply in-depth IT security best practices in large-scale enterprise environments, including encryption at rest and in transit, tokenization, and secure API design.
- Apply high-level design architecture knowledge across security technologies, networking, web services, and Service-Oriented Architecture (SOA) to ensure data solutions are resilient and secure.
- Design and review infrastructure and application components across OS environments (Unix, Windows, Linux) and RDBMS platforms (Oracle, SQL Server, Netezza) with security as a first principle.
- Partner with Cybersecurity and Infrastructure teams to ensure semantic layer components meet T-Mobile security standards and pass security architecture reviews.
- Identify and remediate security gaps in data pipelines, access models, and API integrations.
- Team Leadership & Enablement Contribute to team knowledge sharing and drive the advancement of new data engineering capabilities.
- Mentor team members to build and enhance their data engineering skills, with a focus on governance, compliance, and secure data practices.
- Assist management in project definition, including estimating, planning, and scoping work to meet objectives.
- Also responsible for other duties and projects as assigned by business management.
- Approximate Time Allocation Responsibility Area % of Time Semantic layer engineering & model development (Fabric) 25% SOX compliance, governance & audit support 15% USGCI handling, segmentation & NSA compliance 10% Data pipelines, wrangling & cloud architecture 20% IT security design & infrastructure 10% Team mentoring, knowledge sharing & project planning 20%
Required Experience:
- [RATE REDACTED]yrs Developing cloud solutions using data services; hands-on with AWS, Azure, Microsoft Fabric, or Google Cloud
- [RATE REDACTED]yrs Hands-on development and migration of data to cloud platforms X
- [RATE REDACTED]yrs SQL, NoSQL, and relational database design; experience with Oracle, SQL Server, Netezza
- [RATE REDACTED]yrs Building complex data pipelines using Python, SQL, DAX, Java, Scala, and/or Go
- [RATE REDACTED]yrs Designing and building semantic models or data warehouses for enterprise-scale analytics
- [RATE REDACTED]yrs Implementing data governance frameworks including data lineage, cataloging, and access control in a regulated environment
- [RATE REDACTED]yrs SOX compliance activities: IT General Controls (ITGC), audit support, segregation of duties, and change management for data systems
- [RATE REDACTED]yrs IT security best practices in large-scale environments: encryption, tokenization, secure API design, least-privilege access, and security architecture review
- [RATE REDACTED]yrs Infrastructure and application design across OS environments (Unix, Windows, Linux) and RDBMS platforms
- [RATE REDACTED]yrs High-level design architecture across security technologies, networking, web services, and SOA in enterprise environments
- [RATE REDACTED]yrs USGCI data handling, NSA/CFIUS compliance, or equivalent regulated government data programs
- Any Microsoft Fabric (Lakehouse, Warehouse, Dataflows, DirectLake), Power BI, and Microsoft Purview
Preferred Certifications & Additional Skills: Microsoft Certified:
- Azure Data Engineer Associate (DP-203) or equivalent cloud data certification.
- Experience designing Row-Level Security (RLS) and Object-Level Security (OLS) in Power BI or Analysis Services semantic models.
- Familiarity with data classification and tagging frameworks in regulated industries. Knowledge of CPNI (Customer Proprietary Network Information) handling requirements in addition to USGCI.
- Experience working directly with Internal Audit, external auditors, or compliance teams on data control documentation and evidence.
TekWissen® Group is an equal opportunity employer supporting workforce diversity.