Senior Governance Engineer

Job Description

The Onyx Research Data Platform organization represents a major investment by GSK R&D and Digital & Tech, designed to deliver a step-change in our ability to leverage data, knowledge, and prediction to find new medicines. We are a full-stack shop consisting of product and portfolio leadership, data engineering, infrastructure and Dev Ops, data / metadata / knowledge platforms, and AI/ML and analysis platforms, all geared toward:

• Building a next-generation data experience for GSK's scientists, engineers, and decision-makers, increasing productivity, and reducing time spent on "data mechanics".
• Providing best-in-class AI/ML and data analysis environments to accelerate our predictive capabilities and attract top-tier talent.
• Aggressively engineering our data at scale to unlock the value of our combined data assets and predictions in real-time

A Senior Governance Engineer is a leading technical contributor who can consistently take a loosely defined businesses or technical requirements, architect and build it to a well-defined specification, and execute on it at a high level. You have a strong focus on metrics, both for the impact of your work and for its inner workings / operations.

As a Senior Governance Engineer, you will play a crucial role in ensuring our product teams produce reliable, scalable, and secure infrastructure and applications. You will collaborate closely with the platform infrastructure and data operations teams to implement security and governance products within our existing technological infrastructure. You should be deeply familiar with the tools and processes associated with security and governance for regulated industries and able to work with stakeholders to translate those requirements to build efficient and user-friendly products.

• Design and deploy scalable and reliable governance solutions using a mix of existing technologies, open-source tools, and newly identified integrations.
• Build and maintain an automated policy engine that integrates with existing authorization systems, uses policy as code, is cloud-native (GCP), and is integrated with the other Onyx Platforms and frameworks.
• Enable governance by design and implementation of user-friendly products through the use of computational and automatable engines and integrations with existing data platforms and pipelines, metadata, and authorization systems.
• Understand, amplify with Onyx and integrate requirements from security and internal regulatory teams to ensure compliance with security policies and regulations as part of the governance products.
• Collaborate with cross-functional teams to understand business requirements and translate them into scalable and efficient governance products.
• Use standard agile development SDLC processes for development management, CI/CD, and automation for infrastructure provisioning and deployment processes.
• Stay updated with the latest trends and best practices in security, governance, and data governance and contribute to the continuous improvement of our overall infrastructure and data platform.
• Provide technical guidance and mentorship to junior team members, fostering a collaborative and knowledge-sharing culture within the organisation.
• Troubleshoot and resolve governance related issues and provide technical support to internal teams.

• Bachelor's degree.
• Knowledge and use of one or more programming languages: e.g., Go, Python, Scala, Java.
• Experience in utilizing any cloud-based data governance solutions, like Open Policy Agent (OPA), Strya-DAS, Immuta, Privacera, Gatekeeper, AWS Data Governance tools, Google Cloud Data Catalog/Data Plex, or Microsoft Azure Purview, to manage and govern data across various cloud environments.
• Experience with Policy and Compliance monitoring.

• Extensive knowledge of computational data governance, data security, compliance regulations, and industry best practices.
• Experience with managing authorization and authentication as code, integrating with Enterprise role-based access tools.
• Experience with implementing attribute-based access control.
• Demonstrated experience…