Project Role : Custom Software Engineer

Project Role Description : Develop custom software solutions to design, code, and enhance components across systems or applications. Use modern frameworks and agile practices to deliver scalable, high-performing solutions tailored to specific business needs.

Must have skills : Python (Programming Language)

Good to have skills : API Management, Snowflake Data Warehouse, Databricks Unified Data Analytics Platform

Minimum 5 Year(s) Of Experience Is Required

Educational Qualification : 15 years full time education

We are seeking an Immuta Data Security and Access Governance Consultant to support the design, implementation, configuration, testing, and operationalization of enterprise data-access controls. The selected resource will implement policy-based access governance across Snowflake, Databricks Unity Catalog, and Iceberg/S3 environments, using Immuta to enforce consistent, auditable access policies based on data classifications, user attributes, business purpose, and risk.

This is a hands-on, client-facing role that requires practical Immuta implementation experience, strong knowledge of cloud data platforms and identity integration, and the ability to translate business and regulatory requirements into clear technical designs, reusable policies, test evidence, runbooks, and operating procedures.

Lead or support Immuta implementation, configuration, integration, testing, and production-readiness activities.

Facilitate workshops with business owners, data owners, security teams, platform administrators, and governance stakeholders to define access-governance use cases and acceptance criteria.

Translate business, privacy, security, and regulatory requirements into reusable role-based, attribute-based, and purpose-based access-control models (RBAC, ABAC, and PBAC).

Onboard and configure governed data sources in Immuta, including Snowflake, Databricks Unity Catalog, and approved Iceberg/S3 access patterns.

Configure and validate identity integration with Microsoft Entra ID/Azure AD and SCIM, including users, groups, roles, custom identity attributes, service accounts, and other non-human identities.

Design and implement data policies for dynamic masking, row-level filtering, geographic restrictions, business-unit restrictions, clearance-based access, purpose-based access, time-bound access, and approved emergency or break-glass scenarios.

Define and implement tag-to-policy mappings using approved BigID classifications, Snowflake tags, Unity Catalog metadata, Iceberg/catalog metadata, and steward-approved attributes.

Build reusable global policies and policy templates that can be applied consistently across business areas and data platforms.

Validate object ownership, native grants, Immuta-managed roles, separation of duties, least privilege, and the coexistence or removal of direct platform grants.

Configure and test policy lifecycle controls, including development, review, approval, promotion, versioning, rollback, exception handling, and production deployment.

Support CI/CD and infrastructure-as-code patterns for policy configuration and promotion using APIs, Git-based workflows, Terraform, Python, or other approved automation tools.

Execute positive and negative access testing across personas, groups, identity attributes, service accounts, and environments document expected versus actual results.

Validate governed data consumption through downstream tools such as Power BI and SAS Viya, including direct-query, live-connection, cached/import, and service-account access patterns where applicable.

Support integration with data catalogs and marketplace workflows, including Atlan, Informatica IDMC/CDGC, Collibra, or other approved platforms for access requests, approvals, provisioning, and status updates.

Configure and review Immuta audit logs, policy activity, access decisions, violations, overrides, trends, and evidence required for governance and compliance reporting.

Troubleshoot policy, identity, connector, metadata, masking, row-filtering, performance, and access issues across Immuta and the underlying data platforms.

Develop operational runbooks, architecture and configuration documentation, policy inventories, test scripts, evidence packs, issue logs, escalation procedures, and support-model materials.

Provide knowledge transfer, hypercare support, issue of triage, vendor coordination, and transition assistance to client operations teams.

Communicate technical decisions, risks, dependencies, blockers, and recommended actions clearly to both technical and nontechnical stakeholders.

Mandatory Skills And Experience

Demonstrated hands-on experience implementing, configuring, administering, or supporting Immuta in a production or production-like environment.

Strong understanding of enterprise data-access governance and fine-grained access-control concepts, including RBAC, ABAC, PBAC, least privilege, separation of duties, entitlements, and policy lifecycle management.

Experience designing and configuring Immuta policies for masking, row-level filtering, conditional access, and attribute-driven enforcement.

Working knowledge of Snowflake security and governance, including roles, grants, object ownership, masking policies, row-access policies, tags, warehouses, and service accounts.

Led governance monitoring and compliance activities using Immuta, including audit reporting, access reviews, policy violation analysis, compliance evidence collection, and governance dashboard reporting to ensure adherence to enterprise security and regulatory requirements.

Troubleshot and resolved complex Immuta platform issues involving access policies, connector integrations, identity synchronization, metadata propagation, dynamic data masking, and performance optimization to maintain reliable and secure data access controls.

Experience with Microsoft Entra ID/Azure AD, SCIM, users, groups, identity attributes, custom claims or attributes, and identity-propagation troubleshooting.

Strong SQL skills for access validation, policy testing, troubleshooting, evidence generation, and verification of data-platform behavior.

Understanding of metadata, data classification, sensitivity labels, tags, catalogs, lineage, and tag-to-policy mapping.

Experience with at least one additional governed data platform or access pattern, such as Databricks Unity Catalog, Apache Iceberg, Amazon S3, AWS Glue, Athena, or Trino.

Ability to design and execute test scenarios covering authorized access, denied access, masking, row filtering, attribute changes, service accounts, direct grants, and rollback.

Working knowledge of REST APIs and JSON for platform integration, automation, testing, and troubleshooting.

Basic scripting or automation experience, preferably using Python, Terraform, PowerShell, or shell scripting.

Experience with at least one major cloud platform: Microsoft Azure, Amazon Web Services, or Google Cloud Platform.

Strong analytical and troubleshooting skills, with the ability to isolate issues across identity, policy, metadata, connectors, data platforms, and downstream applications.

Strong written and verbal communication skills, including the ability to explain policy logic, technical findings, risks, and decisions clearly and concisely.

Ability to lead or actively contribute to client workshops, document requirements, ask clarifying questions, and drive issues to resolution with limited supervision.

Ability to collaborate effectively with data owners, security teams, identity teams, cloud and platform administrators, application teams, and governance stakeholders.

Preferred Skills

Immuta certification, formal Immuta training, or experience with multiple Immuta production implementations.

Experience implementing Immuta across both Snowflake and Databricks Unity Catalog.

Familiarity with Iceberg/S3 governance patterns and the use of catalog metadata for policy evaluation.

Experience integrating Immuta with BigID or another data discovery and classification platform.

Experience with data catalogs and marketplaces such as Atlan, Informatica IDMC/CDGC, Collibra, data.world, or similar platforms.

Experience validating governed access through Power BI, SAS Viya, notebooks, analytics tools, and non-human service identities.

Knowledge of audit, compliance, and data-protection requirements in financial services, insurance, healthcare, or other highly regulated industries.