Atlan Access & Platform Architect

Sygna Solutions•Alpharetta, GA

8d•Remote

About The Position

The Atlan Access & Platform Architect owns the design of access roles, personas, and policies for the Client Data Marketplace (Atlan), which is intended to support about 500 internal employees and 2,000 external customers. The architect will assess and resolve access issues found during UAT, then create a scalable framework that the internal team can operate after the engagement ends. The role involves designing role- and attribute-based access for four tiers—Volunteers, Volunteer Leadership, Staff Leadership, and Power Users—and defining how external customers are separated from internal users. It includes integrating access with SSO groups and SCIM provisioning, collaborating with data architects and engineers on architecture and policy implementation, aligning configuration with governance approvals and agreements, and validating visibility through persona-based UAT testing. The engagement also includes documenting the target model and producing materials for ongoing operations, onboarding, and knowledge transfer.

Requirements

At least 5 years of experience in data platform, data governance, or identity and access management (IAM) architecture.
At least 1–2 enterprise Atlan deployments, or deep equivalent experience with Collibra, Alation, or Microsoft Purview.
Experience designing RBAC and ABAC models for 1,000+ users, including external or partner users.
Hands-on experience with Atlan personas, purposes, metadata and data policies, domains and data products, and tag-driven policy propagation.
Experience integrating SSO and SCIM with an enterprise identity provider such as Okta or Microsoft Entra ID, including group design and joiner/mover/leaver automation.
Experience taking over an existing configuration that was not working and resolving it through structured root-cause analysis.
Ability to translate governance tiers and approval workflows into a documented, testable access matrix.
Knowledge of least-privilege design, access reviews, and audit logging.
Familiarity with privacy and contractual controls for external data sharing.
Ability to work effectively with technical peers, especially data architects and data engineers.
Clear documentation skills and ability to build solutions for handoff.

Responsibilities

Review existing personas, purposes, policies, and groups; identify root causes of UAT visibility issues and resolve them without disrupting current users.
Design a scalable role- and attribute-based access framework for the four access tiers: Volunteers, Volunteer Leadership, Staff Leadership, and Power Users.
Define external-user access for approximately 2,000 customers, including separation from internal users, discovery, metadata and data visibility, roles, and licensing.
Map access to SSO groups and design SCIM-based provisioning and deprovisioning so access follows group membership rather than manual assignment.
Collaborate with data architects and data engineers to align the framework with data architecture, classification, tagging, and pipelines, and explain the design in implementable technical terms.
Align platform configuration with the Two-Layer Access Approval / Expanded Use Review process and the Data Sharing & Access Authorization Agreement (DSAA).
Define UAT test cases that compare expected and actual visibility for each persona before each onboarding wave.
Produce a current-state assessment with root causes of UAT issues.
Deliver a target access model, including a persona catalog, tier-based access matrix, and policy inventory.
Define naming conventions for personas, purposes, policies, and identity groups.
Provide an SSO/SCIM group mapping design and external-user access design.
Create a UAT test plan for persona visibility and an onboarding runbook for new departments and external customers.
Conduct handoff and knowledge-transfer sessions for the internal team.