Atlan Access & Platform Architect

Sygna Solutions • Alpharetta, GA

3d • Remote

About The Position

The Atlan Access & Platform Architect owns the design of access roles, personas, and policies for the Client Data Marketplace (Atlan), with a framework intended to support approximately 500 internal employees and 2,000 external customers. The architect will diagnose and resolve access and visibility issues identified during UAT, then create a scalable model that internal teams can operate after the engagement ends.

The role includes assessing the current configuration, designing and documenting a role- and attribute-based access model, separating external customers from internal users, and integrating access with enterprise identity groups through SSO and SCIM. The architect will collaborate with data architects and engineers to align the framework with the data architecture, classifications, tags, and pipelines, and will ensure platform configuration supports governance approvals and data-sharing agreements.

The architect will define persona-based UAT tests and deliver the documentation, runbooks, and knowledge-transfer sessions needed for ongoing internal operation.

Requirements

• At least 5 years of experience in data platform, data governance, or identity and access management (IAM) architecture.
• At least 1–2 enterprise Atlan deployments, or deep equivalent experience with Collibra, Alation, or Microsoft Purview.
• Experience designing RBAC and ABAC access models for 1,000 or more users, including external or partner users.
• Hands-on experience with Atlan personas, purposes, metadata and data policies, domains and data products, and tag-driven policy propagation.
• Experience integrating SSO and SCIM with an enterprise identity provider such as Okta or Microsoft Entra ID, including group design and joiner/mover/leaver automation.
• Experience taking over an existing configuration that was not working and resolving it through structured root-cause analysis.
• Ability to translate governance tiers and approval workflows into a documented, testable access matrix.
• Knowledge of least-privilege design, access reviews, and audit logging.
• Familiarity with privacy and contractual controls for external data sharing.
• Ability to work effectively with technical peers, especially data architects and data engineers.
• Clear documentation skills and an ability to build solutions that can be handed off.

Responsibilities

• Review existing personas, purposes, policies, and group setup; identify root causes of UAT visibility issues and resolve them without disrupting current users.
• Design a role- and attribute-based access framework implementing the four access tiers: Volunteers, Volunteer Leadership, Staff Leadership, and Power Users.
• Define how external customers are separated from internal users, including discovery, metadata and data visibility, user roles, and licensing.
• Map access to SSO groups and automate provisioning and deprovisioning through SCIM so access follows group membership rather than manual assignment.
• Collaborate with data architects and data engineers to align the framework with data architecture, classification, tagging, and pipelines, and explain the design in implementable technical terms.
• Align platform configuration with the Two-Layer Access Approval / Expanded Use Review process and the Data Sharing & Access Authorization Agreement (DSAA).
• Define UAT test cases that compare expected and actual visibility for each persona before each onboarding wave.
• Produce a current-state assessment, target access model, persona catalog, access matrix, policy inventory, naming conventions, SSO/SCIM mapping design, external-user access design, and UAT test plan.
• Create onboarding runbooks for new departments and external customers, and conduct handoff and knowledge-transfer sessions for the internal team.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed