Data Governance Engineer (Microsoft Purview)
Exciting Opportunities for Tech Talent – Find Your Perfect Role!
You will be responsible for delivering a full Microsoft Purview implementation across 6 workstreams — from platform provisioning and source scanning through custom lineage ingestion, retention enforcement, and formal handover to the client’s operations team.
The project is structured around 22 named deliverables with a formal hypercare phase at close. Your will work closely with the client’s Data Stewardship and Governance Office (DSGO), Technology Operations, Information Security, Legal, and Internal Audit stakeholders.
The project is Payments-domain first, extending to Client, Risk, and Finance.
You will work with Microsoft Purview Unified Catalog, Apache Atlas REST API, dbt manifest parsing, Snowflake and Redshift scanning/retention, S3 lifecycle/Object Lock, Azure networking (private endpoints, hub-spoke), Key Vault, Entra ID groups, M365 compliance tools, IaC (for environment provisioning and handover)
Requirements and responsibilities
- 7+ years of overall experience; 3+ years hands-on with Microsoft Purview (Unified Catalog experience required, not just classic portal);
- Experience building custom lineage ingestion using Apache Atlas hooks and Purview REST API for non-native sources;
- Hands-on experience parsing dbt manifest/run-results artefacts for column-level lineage;
- Snowflake and Amazon Redshift experience (scanning, classification, retention enforcement);
- M365 Purview Data Lifecycle Management: retention labels, adaptive scopes, Records Management, legal hold;
- Custom sensitive information type authoring (Canadian financial identifiers, PCI data) with false-positive tuning;
- Azure networking: private endpoints, hub-spoke topology, DNS, Key Vault, Managed Identity, Entra ID RBAC;
- Self-hosted integration runtime deployment (HA pair, capacity sizing, patching);
- Must have delivery history on client projects for the above — generic exposure won’t be considered;
- 2+ hours overlap with EST daily;
- Professional English (written & verbal).
- Design, provision, and harden Purview environment (non-prod & prod) using IaC;
- Configure network isolation and governance domain structure in Unified Catalog;
- Implement RBAC model mapped to Entra ID groups;
- Register and scan source systems; tune scan rule sets and classification (15 custom SITs + built-ins);
- Build business glossary, data products, and critical data element register for Payments domain;
- Design custom lineage pipeline (Snowflake, Redshift, dbt) and enable native lineage (ADF, Power BI);
- Implement retention enforcement (M365, Snowflake, Redshift, S3) and immutable disposition logging;
- Deliver IaC, scripts, connectors into client repo; produce runbooks and enablement sessions;
- Conduct handover + 4 weeks hypercare.
- Experience in OSFI-regulated Canadian financial institution;
- Familiarity with PCMLTFA/FINTRAC, PCI DSS, or PIPEDA;
- Experience presenting to audit/compliance committees;
- Power BI / ADF lineage configuration;
- IaC delivery with live redeployment demo.
We offer
- Flexible full-time/part-time hours
- No micromanagement—time logging is for accounting only
- High-quality equipment (MacBook or your own device)
- Dynamic, low-bureaucracy environment
- Team events, swag, and a great crew to hang with
- 20 days of paid annual vacation;
- 15 days of paid sick leaves;
- Possibility to use vacation during probation;
- Maternity and paternity leave;
- Days off on all government holidays.
- $100 annual education allowance
- Mentorship program—learn or lead
- English lessons with biannual reviews
- Certification cost reimbursement
- Free access to Udemy courses on request
- Social package: medical insurance, sports compensation, or psychological training
- IT Club Loyalty card (Lviv IT Cluster)
- No overtime—work-life balance matters
- Transparent payments in EUR/USD, on time every month
- Assistance with military reservation procedure
Refer a friend and receive a bonus when they accept an offer.