Databricks Unity Catalog Admin

What You’ll Do:

The Unity Catalog Administrator will design, automate, and maintain the global data governance, infrastructure provisioning, and security model across the enterprise Databricks ecosystem. This role ensures data assets are systematically standardized, securely cataloged via Entra ID integration, audited for regulatory compliance, and programmatically deployed across multi-workspace architectures.

• Infrastructure Provisioning: Architect and maintain the global Unity Catalog Metastore, external cloud storage locations, storage credentials, and managed UC Volumes.
• Enterprise Automation: Programmatically deploy and manage all catalogs, schemas, external locations, and permissions schemas using a GitOps framework with Terraform.
• Access & Identity Control: Enforce identity federation with Microsoft Entra ID, manage fine-grained object privileges (SELECT, MODIFY, MANAGE), and govern group assignments.
• Standards & Policy Enforcement: Define and enforce enterprise-wide standards for naming conventions, metadata tagging, and strict Workspace-Catalog isolation boundaries across environments (Dev, QA, Stage, Prod).
• Advanced Data Protection: Implement and maintain scalable Row-Level Security (RLS) and Column-Level Masking routines to safeguard sensitive PII/PHI datasets.
• Compliance, Lineage & Auditing: Proactively monitor Unity Catalog System Tables (system.access.audit, system.billing.usage) and map end-to-end data lineage for regulatory compliance.
• Data Sharing Frameworks: Configure, manage, and audit Delta Sharing protocols and clean rooms to enable secure, zero-copy data exchange with external partners.
• Cross-Cloud Automation & GitOps: Programmatically deploy and govern all catalogs, schemas, external storage locations, and access control lists (ACLs) using a unified CI/CD GitOps pipeline. Enforce drift detection for manual permission mutations made in either the Azure or GCP Databricks UI.

What You Bring:

• Databricks Governance Architecture: Deep architectural expertise in Unity Catalog, Delta Lake, Delta Sharing, System Tables.

• Automation & GitOps CI/CD: Experience with Terraform (specifically the Databricks Provider) and PowerShell for automated, repeatable environment deployments and state management is considered an asset.

• Advanced Data Security: Practical experience designing and implementing Role-Based Access Control (RBAC), Attribute-Based Access Control (ABAC), Row-Level Security (RLS), and Column-Level Data Masking.
• Data Strategy & Querying: Proficient in SQL (specifically administrative DDL for GRANTS/REVOKES) and familiar with enterprise data lifecycle management.
• Azure Infrastructure & Identity: Hands-on proficiency with Microsoft Entra ID (SCIM/AIM provisioning, group syncing), Azure IAM (User-Assigned Managed Identities, Access Connectors), and Azure Key Vault.
• GCP Infrastructure & Identity: Hands-on proficiency with Google Cloud Identity, IAM Service Accounts (with Workload Identity Federation), Manage SSO Integration, Google Cloud Storage (GCS) buckets, and GCP Workload Identity Federation.

Location: Toronto, Ontario (Hybrid: In-office 4 days a week)

We’re always looking for great talent! In addition to competitive pay, we offer:

• Comprehensive benefits and retirement programs
• Performance incentives, Continuing Education Programs
• Other perks to support your well-being
• Career growth opportunities and product discounts

Broadband Salary Range: $64,000 – $106,000
Our typical hiring range is between $64,000 and $85,000. Salary decisions are also dependent on other factors such as your experience, industry benchmarks, internal equity and other role-specific requirements. For critical roles, the compensation offering will be reviewed to ensure alignment with market rate and conditions and the unique value you bring to the role.

#LI-AK1

This posting represents an existing vacancy within our organization.

We may use artificial intelligence tools as part of our recruitment process to assist in the initial screening of resumes. All hiring decisions, including candidate evaluation, selection, and disposition, are made by human recruiters.

About Us

Canadian Tire Corporation, Limited (“CTC”) is one of Canada’s most admired and trusted companies. With more than 90 Owned Brands, over 1,600 retail locations, financial services, exemplary e-commerce capabilities, and exciting market-leading merchandising strategies. We dream big and work as one to innovate with purpose for our customers at every level of our business, investing in new technologies and products, and doubling down on top talent to drive the company forward. We offer competitive salaries and wages to CTC employees, as well as store discounts, supported learning through our Triangle Learning Academy, Canadian Tire Profit Sharing, and retirement and savings programs for eligible employees. As part of our enhanced flex benefits program, we offer mental health benefits in the amount of $5,000 per year for benefits-eligible employees and their families, including total well-being, and mental health tools and resources for all employees. Join us in helping to make life in Canada better through living and working our Core Values: we are innovators and entrepreneurs at our core, outcomes drive us, inclusion is a must, we are stronger together and we take personal responsibility. It is an especially exciting time to join CTC and its family of companies where career opportunities are wide-ranging! Join us, where there's a place for you here.

Our Commitment to Diversity, Inclusion and Belonging 

We are committed to fostering an environment where belonging thrives, and diversity, inclusion and equity are infused into everything we do. We believe in building an organizational culture where people are consistently treated with dignity while respecting individual religion, nationality, gender, race, age, perceived ability, spoken language, sexual orientation, and identification. We are united in our purpose of being here to help make life in Canada better.

Accommodations  

We stand firm in our Core Value that inclusion is a must. We welcome and encourage candidates from equity-seeking groups such as people who identify as racialized, Indigenous, 2SLGBTQIA+, women, people with disabilities, and beyond. Should you require any accommodation in applying for this role, or throughout the interview process, please make them known when contacted and we will work with you to help meet your needs.