Atlan Access & Platform Architect

Sygna Solutions; United States; Remote; USD 170,000 - 230,000; Full time

Job summary

Sygna Solutions seeks an Atlan Access & Platform Architect to design and implement a scalable access framework for the Client Data Marketplace. You will model role- and attribute-based access, integrate with enterprise identity, and enable external-user separation at scale.

Lead governance alignment, define UAT test plans, and hand over complete documentation and runbooks to the internal team. This is a remote role based in the United States.

Qualifications

• Minimum of 5+ years in data platform, IAM, or governance architecture.
• Experience with enterprise Atlan deployments or equivalent tools (Collibra/Alation/Purview).
• Designed RBAC/ABAC models for 1,000+ users including external users.
• Hands-on with Atlan personas, metadata, data policies, and tagging.
• SSO/SCIM integration with enterprise IdP (Okta or Entra ID) including automation.
• Proven ability to fix existing configurations through root-cause analysis.

Responsibilities

• Diagnose UAT visibility issues and fix without disrupting users.
• Design a scalable RBAC/ABAC access model for four tiers.
• Plan external-user separation for 2,000 externals from internal users.
• Map access to SSO groups and automate provisioning via SCIM.
• Collaborate with data architects and engineers to fit the data architecture.
• Align platform config with Two-Layer Access Approval and DSAA governance.
• Define UAT test cases for persona visibility before onboarding waves.
• Produce onboarding runbooks and knowledge transfer materials.

Skills

RBAC/ABAC

Atlan platform

SSO/SCIM

Identity governance

Least-privilege design

Documentation & handoff

External-user access design

Tools

Okta

Microsoft Entra ID

Collibra

Alation

Microsoft Purview

SCIM tooling

Job description

Atlan Access & Platform Architect

Location: Remote (USA)

Purpose

This role owns the design of the access roles, personas, and policy framework for the Client Data Marketplace (Atlan). The framework must scale to about 500 internal employees and 2,000 external customers. The architect will first diagnose and fix the access issues found in UAT, then build a model that internal teams can run on their own.

Key responsibilities

• Diagnose current issues. Review the existing personas, purposes, policies, and group setup. Find the root cause of the UAT visibility issues and fix them without disrupting current users.
• Design the target access framework. Build a role- and attribute-based access model that puts Client's four access tiers into practice: Volunteers, Volunteer Leadership, Staff Leadership, and Power Users.
• Design for external users. Define how 2,000 external customers are separated from internal users. Cover discovery, metadata vs. data visibility, user roles, and licensing.
• Integrate with identity. Map access to SSO groups and automate provisioning and deprovisioning through SCIM, so access follows group membership instead of manual assignment.
• Collaborate with data architects and data engineers. Co-design the framework so it fits the underlying data architecture, classification, tagging, and pipelines. Explain and share the framework in technical terms they can build against.
• Align with governance processes. Make the platform configuration support the Two-Layer Access Approval / Expanded Use Review process and the Data Sharing & Access Authorization Agreement (DSAA).
• Validate through testing. Define UAT test cases that check expected vs. actual visibility for each persona before each onboarding wave.
• Document and hand off. Produce everything the internal team needs to run the model after the engagement ends.

Deliverables

• Current-state assessment with root causes of UAT issues.
• Target access model: persona catalog, access matrix by tier, and policy inventory.
• Naming conventions for personas, purposes, policies, and identity groups.
• SSO/SCIM group mapping design.
• External-user access design.
• UAT test plan for persona visibility.
• Onboarding runbook for new departments and external customers.
• Handoff and knowledge-transfer sessions for the internal team.

Required experience

• 5+ years in data platform, data governance, or identity and access management (IAM) architecture.
• At least 1-2 enterprise Atlan deployments, or deep equivalent experience with Collibra, Alation, or Microsoft Purview.
• Has designed role-based and attribute-based access models (RBAC/ABAC) for 1,000+ users, including external or partner users.
• Hands-on with Atlan personas, purposes, metadata and data policies, domains and data products, and tag-driven policy propagation.
• SSO and SCIM integration with an enterprise identity provider (for example Okta or Microsoft Entra ID), including group design and joiner/mover/leaver automation.
• Has taken over an existing configuration that wasn't working and fixed it through structured root-cause analysis.

Skills

• Translates governance tiers and approval workflows into a documented, testable access matrix.
• Least-privilege design, access reviews, and audit logging.
• Familiar with privacy and contractual controls for external data sharing.
• Works well with technical peers, especially data architects and data engineers.
• Documents clearly and builds for handoff.