Atlan Access & Platform Architect

PurposeThis role owns the design of the access roles, personas, and policy framework for the Client Data Marketplace (Atlan). The framework must scale to about 500 internal employees and 2,000 external customers. The architect will first diagnose and fix the access issues found in UAT, then build a model that internal teams can run on their own.Key responsibilitiesDiagnose current issues. Review the existing personas, purposes, policies, and group setup. Find the root cause of the UAT visibility issues and fix them without disrupting current users.Design the target access framework. Build a role- and attribute-based access model that puts Client’s four access tiers into practice: Volunteers, Volunteer Leadership, Staff Leadership, and Power Users.Design for external users. Define how 2,000 external customers are separated from internal users. Cover discovery, metadata vs. data visibility, user roles, and licensing.Integrate with identity. Map access to SSO groups and automate provisioning and deprovisioning through SCIM, so access follows group membership instead of manual assignment.Collaborate with data architects and data engineers. Co-design the framework so it fits the underlying data architecture, classification, tagging, and pipelines. Explain and share the framework in technical terms they can build against.Align with governance processes. Make the platform configuration support the Two-Layer Access Approval / Expanded Use Review process and the Data Sharing & Access Authorization Agreement (DSAA).Validate through testing. Define UAT test cases that check expected vs. actual visibility for each persona before each onboarding wave.Document and hand off. Produce everything the internal team needs to run the model after the engagement ends.DeliverablesCurrent-state assessment with root causes of UAT issuesTarget access model: persona catalog, access matrix by tier, and policy inventoryNaming conventions for personas, purposes, policies, and identity groupsSSO/SCIM group mapping designExternal-user access designUAT test plan for persona visibilityOnboarding runbook for new departments and external customersHandoff and knowledge-transfer sessions for the internal teamRequired experience5+ years in data platform, data governance, or identity and access management (IAM) architectureAt least 1–2 enterprise Atlan deployments, or deep equivalent experience with Collibra, Alation, or Microsoft PurviewHas designed role-based and attribute-based access models (RBAC/ABAC) for 1,000+ users, including external or partner usersHands-on with Atlan personas, purposes, metadata and data policies, domains and data products, and tag-driven policy propagationSSO and SCIM integration with an enterprise identity provider (for example Okta or Microsoft Entra ID), including group design and joiner/mover/leaver automationHas taken over an existing configuration that wasn't working and fixed it through structured root-cause analysisSkillsTranslates governance tiers and approval workflows into a documented, testable access matrixLeast-privilege design, access reviews, and audit loggingFamiliar with privacy and contractual controls for external data sharingWorks well with technical peers, especially data architects and data engineersDocuments clearly and builds for handoff