Governance Architect

This is a fully remote position, open to applicants in Washington.

📋 Description

• Develop and execute a scalable governance and access framework for the client's Data Marketplace utilizing Atlan.

• Provide support for approximately 500 employees and 2,000 external clients.

• Identify and rectify persona, policy, and group-related access issues without interfering with current users.

• Design least-privilege RBAC/ABAC across four access tiers, ensuring internal/external segregation and overlapping memberships.

• Set up Atlan personas, purposes, and policies.

• Differentiate metadata visibility from access to source-system data and confirm licensing constraints.

• Integrate SSO groups and facilitate SCIM provisioning/deprovisioning.

• Automate repeatable configurations and validations using supported APIs or SDKs.

• Align classification, tags, domains, and data products with access controls.

• Collaborate with data architects, engineers, and security teams.

• Execute governance approval and DSAA requirements, including access expiration, exceptions, periodic reviews, and auditability.

• Conduct positive and negative UAT, address defects, and secure approval for phased onboarding with rollback controls.

• Provide architecture documentation, operational runbooks, and knowledge transfer to the internal governance team.

• Convert governance tiers and approval workflows into a documented, testable access matrix.

⛳️ Requirements

• A minimum of 10 years of overall experience, with at least 5 years in data governance, data platform, or IAM architecture.

• Proven experience in designing RBAC/ABAC for over 1,000 users.

• Experience with 1–2 enterprise Atlan implementations, or substantial equivalent experience with Collibra, Alation, or Microsoft Purview, demonstrating hands-on expertise.

• Proficient in Atlan personas, purposes, policies, classification, domains, and data products.

• Experience with SSO/SCIM integration using Okta or Microsoft Entra ID, including group mapping and user lifecycle automation.

• Strong skills in troubleshooting, access testing, least-privilege design, stakeholder communication, and documentation.

• Independent visa only.

• Current work authorization options include U.S. Citizen, Green Card, H1-B, or Other.

🏝️ Benefits

• Potential for contract extension.

• Option for remote work arrangement.