Senior Data Architect

Overview

Contract

Project/Program

Identity & Access Management (IAM) Data Modernization – migration of an on‑premises SQL data warehouse to a target‑state Data Lake on Google Cloud (GCP), enabling metrics & reporting, advanced analytics, and GenAI use cases (natural language querying, accelerated summarization, cross‑domain trend analysis).

About Program/Project

The IAM Data Modernization project involves migrating an on-premises SQL data warehouse to a target state Data Lake in GCP cloud environment. Key highlights include:

• Integration Scope: 30+ source system data ingestions and multiple downstream integrations
• Capabilities: Metrics, reporting, and Gen AI use cases with natural language querying, advanced pattern/trend analysis, faster summarizations, and cross-domain metric monitoring
• Scalability and access to advanced cloud functionality
• Highly available and performant semantic layer with historical data support
• Unified data strategy for executive reporting, analytics, and Gen AI across cyber domains

This modernization establishes a single source of truth for enterprise-wide data-driven decision-making.

• Proven experience designing and implementing data lake architectures (e.g., Bronze/Silver/Gold or layered models).
• Strong knowledge of Cloud Storage (GCS) design, including bucket layout, naming conventions, lifecycle policies, and access controls

Experience with
Hadoop/HDFS architecture
, distributed file systems, and data locality principles

• Hands-on experience with columnar data formats (Parquet, Avro, ORC) and compression techniques
• Expertise in partitioning strategies
  , backfills, and large-scale data organization
• Ability to design data models optimized for analytics and BI consumption

• Experience: [10–14]+ years in data engineering/architecture, 5+ years designing on GCP at scale; prior on‑prem → cloud migration a must.
• Education: Bachelor’s/Master’s in Computer Science, Information Systems, or equivalent experience.
• Certifications:
  Google Cloud Professional Cloud Architect (required or within 3 months). Plus: Professional Data Engineer, Security Engineer.

• Experience building batch and streaming ingestion pipelines using GCP-native services
• Knowledge of Pub/Sub-based streaming architectures
  , event schema design, and versioning
• Strong understanding of incremental ingestion and CDC patterns
  , including idempotency and deduplication
• Hands-on experience with workflow orchestration tools (Cloud Composer / Airflow)
• Ability to design robust error handling, replay, and backfill mechanisms

• Experience developing scalable batch and streaming pipelines using Dataflow (Apache Beam) and/or Spark (Dataproc)
• Strong proficiency in Big Query SQL
  , including query optimization, partitioning, clustering, and cost control.
• Hands-on experience with Hadoop Map Reduce and ecosystem tools (Hive, Pig, Sqoop)
• Advanced Python programming skills for data engineering, including testing and maintainable code design
• Experience managing schema evolution while minimizing downstream impact

• Expertise in Big Query performance optimization and data serving patterns
• Experience building semantic layers and governed metrics for consistent analytics
• Familiarity with BI integration
  , access controls, and dashboard standards
• Understanding of data exposure patterns via views, APIs, or curated datasets

• Experience implementing data catalogs, metadata management, and ownership models
• Understanding of data lineage for auditability and troubleshooting
• Strong focus on data quality frameworks
  , including validation, freshness checks, and alerting
• Experience defining and enforcing data contracts, schemas, and SLAs
• Familiarity with audit logging and compliance readiness
• Strong hands-on experience with Google Cloud Platform (GCP), including project setup, environment separation, billing, quotas, and cost controls
• Expertise in IAM and security best practices
  , including least-privilege access, service accounts, and role-based access
• Solid understanding of VPC networking
  , private access patterns, and secure service connectivity
• Experience with encryption and key management (KMS, CMEK) and security auditing

• Proven ability to build CI/CD pipelines for data and infrastructure workloads
• Experience managing secrets securely using GCP Secret Manager
• Ownership of observability, SLOs, dashboards, alerts, and runbooks
• Proficiency in logging, monitoring, and alerting for data pipelines and platform reliability

• Security, Privacy & Compliance

• Hands-on experience implementing fine-grained access controls for Big Query and GCS
• Experience with VPC Service Controls and data exfiltration prevention
• Knowledge of PII handling
  , data masking, tokenization, and audit requirements