[Hiring] Collibra & GCP Data Governance Support Engineer @Cynet Systems

Role Description

The candidate will provide L2 operational and production support for Collibra and GCP data governance infrastructure. Primary duties involve managing access control, handling BigQuery data access controls, and supporting GCP platform services across enterprise systems.

Qualifications

• Hands-on experience supporting Collibra in an enterprise environment (Mandatory).
• Experience with Collibra Data Governance, Data Marketplace, Edge, and/or Data Quality capabilities.
• Understanding of data governance and data access approval workflows.
• Experience with Collibra and GCP integrations.
• Basic SQL and Python knowledge.
• Experience writing and troubleshooting BigQuery SQL.
• Strong understanding of GCP IAM concepts with hands-on IAM troubleshooting experience (Mandatory).
• Hands-on experience with Google BigQuery.
• Experience implementing and managing BigQuery Data Access Controls, including FGAC, RLS, CLS, Policy Tags, and Data Policies.
• Experience with Google Workspace / Google Groups for access management.
• Working knowledge of Cloud Run, Cloud Composer/Airflow, Cloud Scheduler, and Cloud Logging.
• Ability to troubleshoot user, group, service account, IAM, and data access issues.
• Experience working in an L2 application/production support environment.
• Familiarity with ITIL-based support processes and ticketing platforms such as ServiceNow.
• Ability to analyze application and cloud logs and perform root-cause analysis.
• Strong verbal and written communication skills and coordination capabilities.

Requirements

• Provide L2 operational and production support for the Collibra platform.
• Troubleshoot issues related to Collibra application access, forms, workflows, Data Marketplace, and data access requests.
• Investigate failed, stuck, or incorrectly routed requests and coordinate with appropriate teams for resolution.
• Support users with Collibra access and data governance processes.
• Troubleshoot Collibra integration and connectivity issues with GCP and other enterprise systems.
• Analyze application and integration logs to identify root causes.
• Escalate platform, infrastructure, or product issues to appropriate L3/vendor teams when required.
• Maintain incident, problem, knowledge, and support documentation.
• Demonstrate strong understanding and hands-on experience with Google Cloud IAM, including IAM roles and permissions, predefined and custom roles, users, groups, service accounts, resource-level IAM policies, and the principle of least privilege.
• Investigate and resolve GCP authentication, authorization, and permission-related issues.
• Analyze IAM policies to determine why users, groups, or service accounts are unable to access GCP resources.
• Support user onboarding, offboarding, and access changes.
• Work with application, security, governance, and data teams to provision appropriate access.
• Demonstrate hands-on experience supporting and administering Google BigQuery.
• Implement, manage, and troubleshoot BigQuery Data Access Controls, including Fine-Grained Access Control (FGAC), Row-Level Security (RLS) / Row Access Policies, Column-Level Security (CLS), Policy Tags, Data Policies, and dataset and table-level access.
• Troubleshoot scenarios where users can access a BigQuery dataset or table but cannot access specific rows or sensitive columns.
• Understand the relationship between GCP IAM, BigQuery permissions, Policy Tags, Data Policies, RLS, and CLS.
• Support onboarding and offboarding of users and groups from data access policies.
• Assist with periodic access reviews and remediation of incorrect or outdated access.
• Apply working knowledge of Google Workspace and Google Groups.
• Create and manage user access groups, application access groups, and data access groups.
• Add or remove users from appropriate groups based on approved access requests.
• Understand how Google Groups are used for GCP IAM and BigQuery data access management.
• Troubleshoot group membership and group-based access issues.
• Support access provisioning and de-provisioning processes.
• Working knowledge and troubleshooting experience with key GCP services, including BigQuery, Cloud IAM, Cloud Run, Cloud Composer / Apache Airflow, Cloud Scheduler, Cloud Logging, Cloud Storage, and Service Accounts.

Benefits