Governance Architect

Job Description

Design and implement a scalable governance and access framework for the Client's Data Marketplace on Atlan, supporting approximately 500 employees and 2,000 external customers. Resolve UAT visibility issues and establish a secure, maintainable model before onboarding resumes. This is a hands-on architecture and engineering role.

Roles & Responsibilities

• Diagnose and resolve persona, policy and group-related access defects without disrupting existing users.
• Design least-privilege RBAC/ABAC across the four access tiers, including internal/external segregation (>2000 usres) and overlapping memberships.
• Configure Atlan personas, purposes and policies; distinguish metadata visibility from source-system data access and validate licensing constraints.
• Integrate SSO groups and SCIM provisioning/deprovisioning; automate repeatable configuration and validation using supported APIs or SDKs.
• Align classification, tags, domains and data products with access controls, working with data architects, engineers and security teams.
• Implement governance approval and DSAA requirements, including access expiry, exceptions, periodic reviews and auditability.
• Lead positive and negative UAT, resolve defects and obtain approval for phased onboarding with rollback controls.
• Deliver architecture documentation, operational runbooks and knowledge transfer to the internal governance team.
• Translates governance tiers and approval workflows into a documented, testable access matrix

Required Experience and Skills

• Overall 10+ years of experience having 5+ years in data governance, data platform or IAM architecture; experience designing RBAC/ABAC for 1,000+ users.
• 1–2 enterprise Atlan implementations, or deep equivalent experience with Collibra, Alation, or Microsoft Purview with demonstrable hands-on capability.
• Expertise in Atlan personas, purposes, policies, classification, domains and data products.
• SSO/SCIM integration with Okta or Microsoft Entra ID, including group mapping and user lifecycle automation.
• Strong troubleshooting, access testing, least-privilege design, stakeholder communication and documentation skills.