Governance Architect

Reuben Cooley Inc.; Union (NJ); Presencial; USD 160.000 - 230.000; Tempo integral

Resumo da vaga

Reuben Cooley Inc. is seeking a hands‑on architect to design and implement a scalable governance and access framework for the Client's Data Marketplace on Atlan, supporting 500 employees and 2,000 external customers.

The role focuses on RBAC/ABAC design and end‑to‑end access controls across multiple environments. You will configure Atlan personas, scopes and policies, integrate SSO/SCIM (Okta or Entra), and automate repeatable configuration via APIs.

Qualificações

• 10+ years in data governance, data platform or IAM architecture.
• 5+ years designing RBAC/ABAC for 1,000+ users.
• Hands-on experience with enterprise data catalogs (Atlan, Collibra, Alation, or Purview).

Responsabilidades

• Design scalable governance and access framework for Data Marketplace on Atlan.
• Resolve UAT visibility issues and onboarding rollout with rollback controls.
• Implement least-privilege RBAC/ABAC across four access tiers.
• Configure personas, purposes, policies; validate licensing constraints.
• Integrate SSO groups and SCIM provisioning; automate configuration via APIs/SDKs.
• Deliver architecture runbooks and knowledge transfer to governance teams.
• Translate governance tiers and approval workflows into a documented access matrix.

Conhecimentos

Data governance

IAM architecture

RBAC/ABAC design

Stakeholder communication

Ferramentas

Atlan

Collibra

Alation

Microsoft Purview

Okta

Microsoft Entra ID

Descrição da vaga

Design and implement a scalable governance and access framework for the Client's Data Marketplace on Atlan, supporting approximately 500 employees and 2,000 external customers. Resolve UAT visibility issues and establish a secure, maintainable model before onboarding resumes. This is a hands-on architecture and engineering role.

• Diagnose and resolve persona, policy and group-related access defects without disrupting existing users.
• Design least-privilege RBAC/ABAC across the four access tiers, including internal/external segregation (>2000 usres) and overlapping memberships.
• Configure Atlan personas, purposes and policies; distinguish metadata visibility from source-system data access and validate licensing constraints.
• Integrate SSO groups and SCIM provisioning/deprovisioning; automate repeatable configuration and validation using supported APIs or SDKs.
• Align classification, tags, domains and data products with access controls, working with data architects, engineers and security teams.
• Implement governance approval and DSAA requirements, including access expiry, exceptions, periodic reviews and auditability.
• Lead positive and negative UAT, resolve defects and obtain approval for phased onboarding with rollback controls.
• Deliver architecture documentation, operational runbooks and knowledge transfer to the internal governance team.
• Translates governance tiers and approval workflows into a documented, testable access matrix

Required Experience and Skills

• Overall 10+ years of experience having 5+ years in data governance, data platform or IAM architecture; experience designing RBAC/ABAC for 1,000+ users.
• 1–2 enterprise Atlan implementations, or deep equivalent experience with Collibra, Alation, or Microsoft Purview with demonstrable hands‑on capability.
• Expertise in Atlan personas, purposes, policies, classification, domains and data products.
• SSO/SCIM integration with Okta or Microsoft Entra ID, including group mapping and user lifecycle automation.
• Strong troubleshooting, access testing, least-privilege design, stakeholder communication and documentation skills.