Data Architect
Remote
Long Term
Need Independent visa holders
Role Summary
The Data Architect will lead the end-to-end architecture, data modeling, and governance design for Client enterprise Consent & Access Enforcement platform. The role will define and govern the architecture supporting Consent Registry, Policy Repository Point (PRP), Policy Decision Point (PDP), Policy Enforcement Points (PEP), identity mapping services, sensitivity enforcement, and enterprise-wide access control patterns.
This individual will work closely with Privacy, Security, Data Governance, Identity Management, Epic, Research, and Enterprise Architecture teams to ensure all consent, sensitivity, and access policies are modeled, normalized, governed, traceable, auditable, and enforceable consistently across APIs, event streams, and analytical data platforms.
Key Responsibilities
Enterprise Data Architecture
- Translate validated consent and access enforcement architecture into detailed physical architecture.
- Design canonical enterprise data models for:
- FHIR R4 Consent Resources
- Consent Registry
- Policy Repository Point (PRP)
- Access Policy Models
- Security Labels
- Sensitivity Metadata
- Identity Mapping Services
- Establish architecture standards for structured, versioned, queryable, and auditable consent and access policy repositories.
Consent Architecture & Modeling
- Define normalization models for transforming source consent data into FHIR R4 Consent representations.
- Design metadata and lineage strategy preserving source consent records, version history, provenance, and auditability.
- Lead architecture for integration of consent sources including Epic, PTrax, Transcend, OnBase, HIMS, DFD+, REDCap, and MIRUS.
- Establish enterprise consent data contracts and schema governance standards.
Access Enforcement Architecture
- Design architecture patterns for:
- Policy Administration Points (PAP)
- Policy Repository Point (PRP)
- Policy Decision Point (PDP)
- Policy Enforcement Points (PEP)
- Define unified computable access policy schemas supporting:
- Patient Consent
- Proxy Consent
- Research Authorization
- Restricted Data Access
- Break-the-Glass Scenarios
- TPO (Treatment, Payment, Operations)
- Embargo and Time-Based Access Controls
- Ensure enforcement design consistency across APIs, Event Streams, BigQuery, PostgreSQL, and future Microsoft Fabric implementations
Healthcare Data Standards
- Define and govern enterprise adoption of:
- HL7 FHIR R4
- FHIR Consent Resources
- FHIR Security Labels
- HL7 FAST Consent Management standards
- Establish modeling standards for healthcare privacy and consent policies.
- Support integration of research, patient, operational, and provider access use cases.
Sensitivity & Security Architecture
- Design enterprise sensitivity metadata models and confidentiality hierarchy.
- Define inheritance and propagation rules for sensitive records across patient, encounter, document, medication, order, and clinical datasets.
- Enable support for:
- Confidential
- Restricted
- Very Restricted records
- Granular sensitivity security labels
- Ensure architecture supports automated policy evaluation and enforcement decisions.
Identity & Access Architecture
- Define enterprise identity architecture supporting:
- CIAM identities
- Entra ID users
- Patient identities
- Care providers
- Researchers
- Proxy users
- Design identity mapping services across identity domains.
- Establish authorization architecture supporting role-based and purpose-based access decisions.
Data Governance & Observability
- Define metadata, lineage, audit, and observability architecture.
- Establish:
- Data lineage standards
- Data quality frameworks
- Event governance
- Schema management
- Evidence generation and explainability patterns
- Ensure traceability from source consent capture through policy evaluation and enforcement actions.
Architecture Leadership
- Provide architectural leadership throughout all project phases.
- Conduct architecture reviews and design authority sessions.
- Collaborate with:
- Enterprise Architecture
- Privacy Office
- Security Teams
- CIAM/Identity Teams
- Data Platform Teams
- Epic SMEs
- Produce architecture artifacts, design decisions, governance standards, and implementation blueprints.
Technical Expertise
- HL7 FHIR R4
- HL7 FAST Consent Framework
- Healthcare interoperability standards
- Data Governance and Metadata Management
- Data Lineage and Provenance Frameworks
- Enterprise Data Modeling
- API Architecture
- Event-Driven Architectures
- Security and Privacy Architecture
- GCP Data Services
- Data Fabric and Data Mesh Concepts
Cloud & Platform Skills
Strong experience in:
- Google Cloud Platform (GCP)
- BigQuery
- Pub/Sub
- Cloud Run
- GCS
- Apigee X
- Microsoft Fabric
- PostgreSQL
- REST APIs
- Event-Driven Systems
- Identity Platforms (Entra ID / CIAM)
Preferred Qualifications
- Healthcare provider experience with large integrated health systems.
- Experience implementing HIPAA, research consent, and patient privacy controls.
- Knowledge of Epic EHR integration patterns.
- Experience with enterprise policy management and authorization frameworks.
- Experience implementing fine-grained access controls and policy decision services.
- Familiarity with data lineage, auditability, and evidence generation frameworks.