Jobs › Vizient

Data Policy Engineer

Vizient · Chicago, IL · $102,400–$179,000 a year · Full time

Posted Oct 2, 2026 · We last checked this listing on Oct 5, 2026

Apply at Vizient

Likely interview questions for this role

Written from this job description, not a generic list. Each one notes what the interviewer is really checking.

About your past

Tell me about a time you found a gap between what a policy said and what the system actually enforced.

What they are checking: Whether they catch mismatches that could expose sensitive data.

What would you do

A user says they can't see data they should have access to. How do you troubleshoot it?

What they are checking: Whether they have a systematic approach to entitlement failures across groups, tags and policies.

A policy requirement is ambiguous and you're not sure how to implement it. What do you do?

What they are checking: Whether they clarify with policy owners instead of guessing on access to sensitive data.

How would you handle a change to a policy that's already in production without breaking access for users who need it?

What they are checking: Whether they manage change carefully and test impact before deploying.

About the work

Walk me through how you would turn an approved access policy, like masking patient identifiers for certain roles, into an Immuta policy.

What they are checking: Whether they can translate written policy into precise technical rule logic.

How do Immuta and Unity Catalog work together for access control in Databricks?

What they are checking: Whether they understand how the two layers interact and where each control lives.

How would you write test cases to validate that row filtering and masking behave correctly before production?

What they are checking: Whether they test both what users should see and what they should not see.

What's the difference between attribute-based and role-based access control, and when does each fit?

What they are checking: Whether they understand access control models well enough to apply them correctly.

How do you document the lifecycle of a technical control so someone else could audit or maintain it?

What they are checking: Whether they treat documentation as part of the control, which matters for compliance.

What SQL or scripting would you use to check that a masking policy is working as intended?

What they are checking: Whether they have hands-on skills to verify policy behavior directly.

Practice this interview out loud.

Offer builds a real interview for this exact role at Vizient from your resume and this job description, asks the questions one at a time, and tells you what landed. The first one is free.

Practice this out loud

The full job description

As published by Vizient.

When you’re the best, we’re the best. We instill an environment where employees feel engaged, satisfied and able to contribute their unique skills and talents while living and working as their authentic selves . We provide extensive opportunities for personal and professional development, building both employee competence and organizational capability to fuel exceptional performance through an inclusive environment both now and in the future. Summary: In this role, you will translate approved access-control standards and policy requirements into tested technical controls. You will implement and maintain Immuta policies and related access-control configurations, support Unity Catalog integration, validate policy behavior, troubleshoot entitlement and access-control failures, and document the technical control lifecycle. Responsibilities: • Implement and maintain Immuta policies and related access-control configurations. • Support Unity Catalog access-control configuration as required by approved policy designs. • Translate approved policy requirements into technical rule logic, configuration specifications, and implementation tasks. • Develop and execute test cases for policy behavior, filtering, masking, entitlements, and access-control outcomes. • Own technical testing and validation of Immuta policy behavior before production deployment. • Troubleshoot policy behavior, entitlement issues, access-control failures, and implementation defects. • Document policy configurations, dependencies, test results, deployment evidence, and operational requirements. • Support monitoring and reporting needed to measure policy effectiveness and access-control performance. • Partner with Cloud Operations on administrative and deployment activities when Cloud Operations performs SaaS platform operations. • Define reusable technical policy-engineering patterns and provide architecture recommendations within established governance. • Contribute to solution and integration architecture for Immuta, Unity Catalog, IAM, and related access-control platforms. • Partner with the Data Policy Governance Director and Data Policy Analyst to clarify approved policy intent and implementation criteria. Qualifications: • At least a high school diploma required; bachelor’s degree preferred. • 7 or more years of experience implementing access-control, authorization, entitlement, policy, security, or data-governance controls required. • Experience translating policy or business requirements into technical rule logic and configuration required. • Experience with role-based or attribute-based access control, filtering, masking, entitlements, or policy enforcement required. • Strong troubleshooting and testing skills, including the ability to isolate policy, identity, entitlement, configuration, and platform issues required. • Ability to document technical configurations, test evidence, dependencies, and operational procedures required. • Experience collaborating with cloud and platform operations, data engineering, security, IAM, privacy, and business stakeholders required. • Strong communication skills and disciplined change-management practices required. Preferred Experience: • Experience with Immuta or a comparable data-access policy platform preferred. • Experience with Databricks Unity Catalog or comparable data-platform security technologies preferred. • Experience with SQL, APIs, configuration-as-code, scripting, or automation used to test and maintain policy controls preferred. • Experience with solution architecture, systems integration, technical design, security architecture, and communicating design tradeoffs preferred. • Experience with data masking, row-level filtering, purpose-based access, entitlement models, or access reviews preferred. • Experience supporting production change processes and technical control evidence preferred. • Security, cloud, data engineering, IAM, privacy, or governance certifications relevant to the role preferred. #LI-JB1 Estimated Hiring Range: At Vizient, we consider skills, experience, and organizational needs in our compensation approach. Geographic factors may adjust the range estimate and hires typically fall below the top range. Compensation decisions are tailored to individual circumstances. The current salary range for this role is $102,400.00 to $179,000.00. This position is also incentive eligible. Vizient has a comprehensive benefits plan! Please view our benefits here: http://www.vizientinc.com/about-us/careers Equal Opportunity Employer: Females/Minorities/Veterans/Individuals with Disabilities The Company is committed to equal employment opportunity to all employees and applicants without regard to race, religion, color, gender identity, ethnicity, age, national origin, sexual orientation, disability status, veteran status or any other category protected by applicable law.

Apply at Vizient