Governance Architect

Job DescriptionDesign and implement a scalable governance and access framework for the Client's Data Marketplace on Atlan, supporting approximately 500 employees and 2,000 external customers. Resolve UAT visibility issues and establish a secure, maintainable model before onboarding resumes. This is a hands-on architecture and engineering role.Roles & ResponsibilitiesDiagnose and resolve persona, policy and group-related access defects without disrupting existing users.Design least-privilege RBAC/ABAC across the four access tiers, including internal/external segregation (>2000 usres) and overlapping memberships.Configure Atlan personas, purposes and policies; distinguish metadata visibility from source-system data access and validate licensing constraints.Integrate SSO groups and SCIM provisioning/deprovisioning; automate repeatable configuration and validation using supported APIs or SDKs.Align classification, tags, domains and data products with access controls, working with data architects, engineers and security teams.Implement governance approval and DSAA requirements, including access expiry, exceptions, periodic reviews and auditability.Lead positive and negative UAT, resolve defects and obtain approval for phased onboarding with rollback controls.Deliver architecture documentation, operational runbooks and knowledge transfer to the internal governance team.Translates governance tiers and approval workflows into a documented, testable access matrixRequired Experience and SkillsOverall 10+ years of experience having 5+ years in data governance, data platform or IAM architecture; experience designing RBAC/ABAC for 1,000+ users.1–2 enterprise Atlan implementations, or deep equivalent experience with Collibra, Alation, or Microsoft Purview with demonstrable hands-on capability.Expertise in Atlan personas, purposes, policies, classification, domains and data products.SSO/SCIM integration with Okta or Microsoft Entra ID, including group mapping and user lifecycle automation.Strong troubleshooting, access testing, least-privilege design, stakeholder communication and documentation skills.