Data Policy Engineer
Posted Oct 2, 2026 · We last checked this listing on Oct 5, 2026
Likely interview questions for this role
Written from this job description, not a generic list. Each one notes what the interviewer is really checking.
About your past
Tell me about a time you found a gap between what a policy said and what the system actually enforced.
What they are checking: Whether they catch mismatches that could expose sensitive data.
What would you do
A user says they can't see data they should have access to. How do you troubleshoot it?
What they are checking: Whether they have a systematic approach to entitlement failures across groups, tags and policies.
A policy requirement is ambiguous and you're not sure how to implement it. What do you do?
What they are checking: Whether they clarify with policy owners instead of guessing on access to sensitive data.
How would you handle a change to a policy that's already in production without breaking access for users who need it?
What they are checking: Whether they manage change carefully and test impact before deploying.
About the work
Walk me through how you would turn an approved access policy, like masking patient identifiers for certain roles, into an Immuta policy.
What they are checking: Whether they can translate written policy into precise technical rule logic.
How do Immuta and Unity Catalog work together for access control in Databricks?
What they are checking: Whether they understand how the two layers interact and where each control lives.
How would you write test cases to validate that row filtering and masking behave correctly before production?
What they are checking: Whether they test both what users should see and what they should not see.
What's the difference between attribute-based and role-based access control, and when does each fit?
What they are checking: Whether they understand access control models well enough to apply them correctly.
How do you document the lifecycle of a technical control so someone else could audit or maintain it?
What they are checking: Whether they treat documentation as part of the control, which matters for compliance.
What SQL or scripting would you use to check that a masking policy is working as intended?
What they are checking: Whether they have hands-on skills to verify policy behavior directly.
Practice this interview out loud.
Offer builds a real interview for this exact role at Vizient from your resume and this job description, asks the questions one at a time, and tells you what landed. The first one is free.
Practice this out loudThe full job description
As published by Vizient.