Senior Governance Engineer

Job Description

The Onyx Research Data Platform organization represents a major investment by GSK R&D and Digital & Tech, designed to deliver a step- change in our ability to leverage data, knowledge, and prediction to find new medicines. We are a full-stack shop consisting of product and portfolio leadership, data engineering, infrastructure and DevOps, data / metadata / knowledge platforms, and AI/ML and analysis platforms, all geared toward:

• Building a next-generation data experience for GSK's scientists, engineers, and decision-makers, increasing productivity, and reducing time spent on "data mechanics".

• Providing best-in-class AI/ML and data analysis environments to accelerate our predictive capabilities and attract top-tier talent.

• Aggressively engineering our data at scale to unlock the value of our combined data assets and predictions in real-time

A Senior Governance Engineer is a leading technical contributor who can consistently take a loosely defined business or technical requirement, architect and build it to a well-defined specification, and execute on it at a high level. You have a strong focus on metrics, both for the impact of their work and for its inner workings / operations.

As a Senior Governance Engineer, you will play a crucial role in ensuring our product teams produce reliable, scalable, and secure infrastructure and applications. You will collaborate closely with the platform infrastructure and data operations teams to implement security and governance products within our existing technological infrastructure. You should be deeply familiar with the tools and processes associated with security and governance for regulated industries and able to work with stakeholders to translate those requirements to build efficient and user-friendly products.

Key responsibilities include:

• Design and deploy scalable and reliable governance solutions using a mix of existing technologies, open-source tools, and newly identified integrations.

• Build and maintain an automated policy engine that integrates with existing authorization systems, uses policy as code, is cloud-native (GCP), and integrated with the other Onyx Platforms and frameworks.

• Enable governance by design and implementation of user-friendly products through the use of computational and automatable engines and integrations with existing data platforms and pipelines, metadata, and authorization systems.

• Understand, amplify with Onyx and integrate requirements from security and internal regulatory teams to ensure compliance with security policies and regulations as part of the governance products.

• Collaborate with cross-functional teams to understand business requirements and translate them into scalable and efficient governance products.

• Use standard agile development SDLC processes for development management, CI/CD, and automation for infrastructure provisioning and deployment processes.

• Stay updated with the latest trends and best practices in security, governance, and data governance and contribute to the continuous improvement of our overall infrastructure and data platform.

• Provide technical guidance and mentorship to junior team members, fostering a collaborative and knowledge-sharing culture within the organisation.

• Troubleshoot and resolve governance related issues and provide technical support to internal teams.

Why you?Basic Qualifications:

We are looking for professionals with these required skills to achieve our goals:

• Bachelors degree.

• Knowledge and use of one or more programming languages: e.g., Go, Python, Scala, Java.

• Experience in utilizing any cloud-based data governance solutions, like Open Policy Agent (OPA), Strya-DAS, Immuta, Privacera, Gatekeeper, AWS Data Governance tools, Google Cloud Data Catalog/DataPlex, or Microsoft Azure Purview, to manage and govern data across various cloud environments. 

• Experience with Policy and Compliance monitoring.

Preferred Qualifications:

If you have the following characteristics, it would be a plus:

• Extensive knowledge of computational data governance, data security, compliance regulations, and industry best practices. 

• Experience with managing authorization and authentication as code, integrating with Enterprise role-based access tools.

• Experience with implementing attribute-based access control.

• Demonstrated experience building reusable components on top of the CNCF ecosystem including Kubernetes (or similar ecosystem) 

• Experience in modern software development tools / ways of working (e.g. git/GitHub, devops tools, metrics / monitoring, …)

• Cloud experience (e.g., AWS, Google Cloud, Azure, Kubernetes), including infrastructure-as-code

• Application experience of CI/CD implementations using git and a common CI/CD stack (e.g. Jenkins, CircleCI, GitLab, Azure DevOps)

• Demonstrated excellence with agile software development environments using tools like Jira and Confluence

• Passionate about data-management and governance/privacy best practice

#GSK-LI

• If you are based in Cambridge, MA; Waltham, MA; Rockville, MD; or San Francisco, CA, the annual base salary for new hires in this position ranges $136,950 to $228,250.

The US salary ranges take into account a number of factors including work location within the US market, the candidate's skills, experience, education level and the market rate for the role. In addition, this position offers an annual bonus and eligibility to participate in our share based long term incentive program which is dependent on the level of the role. Available benefits include health care and other insurance benefits (for employee and family), retirement benefits, paid holidays, vacation, and paid caregiver/parental and medical leave.

If salary ranges are not displayed in the job posting for a specific country, the relevant compensation will be discussed during the recruitment process.

Why GSK?
Uniting science, technology and talent to get ahead of disease together.

GSK is a global biopharma company with a purpose to unite science, technology and talent to get ahead of disease together. We aim to positively impact the health of 2.5 billion people by the end of the decade, as a successful, growing company where people can thrive. We get ahead of disease by preventing and treating it with innovation in specialty medicines and vaccines. We focus on four therapeutic areas: respiratory, immunology and inflammation; oncology; HIV; and infectious diseases – to impact health at scale.

People and patients around the world count on the medicines and vaccines we make, so we're committed to creating an environment where our people can thrive and focus on what matters most. Our culture of being ambitious for patients, accountable for impact and doing the right thing is the foundation for how, together, we deliver for patients, shareholders and our people.

GSK is an Equal Opportunity Employer. This ensures that all qualified applicants will receive equal consideration for employment without regard to race, color, religion, sex (including pregnancy, gender identity, and sexual orientation), parental status, national origin, age, disability, genetic information (including family medical history), military service or any basis prohibited under federal, state or local law.

We believe in an agile working culture for all our roles. If flexibility is important to you, we encourage you to explore with our hiring team what the opportunities are.

Should you require any adjustments to our process to assist you in demonstrating your strengths and capabilities contact us on or The helpline is available from 8.30am to 12.00 noon Monday to Friday, during bank holidays these times and days may vary.

Please note should your enquiry not relate to adjustments, we will not be able to support you through these channels. However, we have created a UK Recruitment FAQ guide. Click the link and scroll to the Careers Section where you will find answers to multiple questions we receive

Important notice to Employment businesses/ Agencies

GSK does not accept referrals from employment businesses and/or employment agencies in respect of the vacancies posted on this site. All employment businesses/agencies are required to contact GSK's commercial and general procurement/human resources department to obtain prior written authorization before referring any candidates to GSK. The obtaining of prior written authorization is a condition precedent to any agreement (verbal or written) between the employment business/ agency and GSK. In the absence of such written authorization being obtained any actions undertaken by the employment business/agency shall be deemed to have been performed without the consent or contractual agreement of GSK. GSK shall therefore not be liable for any fees arising from such actions or any fees arising from any referrals by employment businesses/agencies in respect of the vacancies posted on this site.

Please note that if you are a US Licensed Healthcare Professional or Healthcare Professional as defined by the laws of the state issuing your license, GSK may be required to capture and report expenses GSK incurs, on your behalf, in the event you are afforded an interview for employment. This capture of applicable transfers of value is necessary to ensure GSK's compliance to all federal and state US Transparency requirements. For more information, please visit the Centers for Medicare and Medicaid Services (CMS) website

---