Collibra L2 Support

• Provide L2 operational and production support for the Collibra platform.
• Troubleshoot issues related to Collibra application access, forms, workflows, Data Marketplace, and data access requests.
• Investigate failed, stuck, or incorrectly routed requests and coordinate with appropriate teams for resolution.
• Support users with Collibra access and data governance processes.
• Troubleshoot Collibra integration and connectivity issues with Google Cloud Platform and other enterprise systems.
• Analyze application and integration logs to identify root causes.
• Escalate platform, infrastructure, or product issues to appropriate L3/vendor teams when required.
• Maintain incident, problem, knowledge, and support documentation.

Google Cloud Platform IAM & Access Management

• Strong understanding and hands-on experience with Google Cloud IAM, including:
• IAM roles and permissions
• Predefined and custom roles
• Users, groups, and service accounts
• Resource-level IAM policies
• Principle of least privilege
• Investigate and resolve Google Cloud Platform authentication, authorization, and permission-related issues.
• Analyze IAM policies to determine why users, groups, or service accounts are unable to access Google Cloud Platform resources.
• Support user onboarding, offboarding, and access changes.
• Work with application, security, governance, and data teams to provision appropriate access.

BigQuery Data Access Controls

• Hands-on experience supporting and administering Google BigQuery.
• Implement, manage, and troubleshoot BigQuery Data Access Controls, including:
• Fine-Grained Access Control (FGAC)
• Row-Level Security (RLS) / Row Access Policies
• Column-Level Security (CLS)
• Policy Tags
• Data Policies
• Dataset and table-level access
• Troubleshoot scenarios where users can access a BigQuery dataset or table but cannot access specific rows or sensitive columns.
• Understand the relationship between Google Cloud Platform IAM, BigQuery permissions, Policy Tags, Data Policies, RLS, and CLS.
• Support onboarding and offboarding of users and groups from data access policies.
• Assist with periodic access reviews and remediation of incorrect or outdated access.

Google Workspace & Group Management

• Working knowledge of Google Workspace and Google Groups.
• Create and manage:
• User access groups
• Application access groups
• Data access groups
• Add or remove users from appropriate groups based on approved access requests.
• Understand how Google Groups are used for Google Cloud Platform IAM and BigQuery data access management.
• Troubleshoot group membership and group-based access issues.
• Support access provisioning and de-provisioning processes.

Google Cloud Platform Platform & Operational Support

• Working knowledge and troubleshooting experience with key Google Cloud Platform services, including:
• BigQuery
• Cloud IAM
• Cloud Run
• Cloud Composer / Apache Airflow
• Cloud Scheduler
• Cloud Logging
• Cloud Storage
• Service Accounts

Required Skills

• Hands-on experience supporting Collibra in an enterprise environment. (Mandatory)
• Experience with Collibra Data Governance, Data Marketplace, Edge, and/or Data Quality capabilities.
• Understanding of data governance and data access approval workflows.
• Experience with Collibra and Google Cloud Platform integrations.
• Basic SQL and Python knowledge.
• Experience writing and troubleshooting BigQuery SQL.
• Strong understanding of Google Cloud Platform IAM concepts with hands-on IAM troubleshooting experience. (Mandatory)
• Hands-on experience with Google BigQuery.
• Experience implementing and managing BigQuery Data Access Controls, including FGAC, RLS, CLS, Policy Tags, and Data Policies.
• Experience with Google Workspace / Google Groups for access management.
• Working knowledge of Cloud Run, Cloud Composer/Airflow, Cloud Scheduler, and Cloud Logging.
• Ability to troubleshoot user, group, service account, IAM, and data access issues.
• Experience working in an L2 application/production support environment.
• Familiarity with ITIL-based support processes and ticketing platforms such as ServiceNow.
• Ability to analyze application and cloud logs and perform root-cause analysis.
• Strong communication and coordination skills.