Governance Engineer II

Job description

Site Name: London The Stanley Building, Cambridge 300 Technology Square, Upper Providence

Posted Date: Dec 2 2025

The Onyx Research Data Platform organization represents a major investment by GSK R&D and Digital & Tech, designed to deliver a step- change in our ability to leverage data, knowledge, and prediction to find new medicines. We are a full-stack shop consisting of product and portfolio leadership, data engineering, infrastructure and DevOps, data / metadata / knowledge platforms, and AI/ML and analysis platforms, all geared toward:

• Building a next-generation data experience for GSK's scientists, engineers, and decision-makers, increasing productivity, and reducing time spent on "data mechanics".
• Providing best-in-class AI/ML and data analysis environments to accelerate our predictive capabilities and attract top-tier talent.
• Aggressively engineering our data at scale to unlock the value of our combined data assets and predictions in real-time

A Governance Engineer II is a technical contributor who can consistently take a defined business or technical requirement, architect and build it to a well-defined specification, and execute on it at a high level. You have a strong focus on metrics, both for the impact of their work and for its inner workings / operations.

As a Governance Engineer II, you will play a crucial role in ensuring our product teams produce reliable, scalable, and secure infrastructure and applications. You will collaborate closely with the platform infrastructure and data operations teams to implement security and governance products within our existing technological infrastructure. You should be familiar with the tools and processes associated with security and governance for regulated industries and able to work with stakeholders to translate those requirements to build efficient and user-friendly products.

Key responsibilities include:

• Design and deploy scalable and reliable governance solutions using a mix of existing technologies, open-source tools, and newly identified integrations.
• Contribute to an automated policy engine that integrates with existing authorization systems, uses policy as code, is cloud-native (GCP), and integrated with the other Onyx platforms and frameworks.
• Enable governance by design and implementation of user-friendly products through the use of computational and automatable engines and integrations with existing data platforms and pipelines, metadata, and authorization systems.
• Collaborate with cross-functional teams to understand business requirements and translate them into scalable and efficient governance products.
• Use standard agile development SDLC processes for development management, CI/CD, and automation for infrastructure provisioning and deployment processes.>
• Stay updated with the latest trends and best practices in security, governance, and data governance and contribute to the continuous improvement of our overall infrastructure and data platform.
• Troubleshoot and resolve governance related issues and provide technical support to internal teams.

Why you? Basic Qualifications:

• Bachelor's Degree
• Knowledge and use of one or more programming language: e.g., Go, Python, Scala, Java.
• Experience building Rest API with authorization logic
• Cloud experience (e.g., AWS, Google Cloud, Azure, Kubernetes), including infrastructure-as-code

Preferred Qualifications:

• Knowledge of computational data governance, data security, compliance regulations, and industry best practices.
• Experience in utilizing cloud-based data governance solutions, like Open Policy Agent (OPA), Strya-DAS, Immuta, Privacera, Gatekeeper, AWS Data Governance tools, Google Cloud Data Catalog/DataPlex, or Microsoft Azure Purview, to manage and govern data across various cloud environments.
• Experience with managing authorization and authentication as code, integrating with Enterprise role-based access tools.
• Demonstrated experience building reusable components on top of the CNCF ecosystem including Kubernetes (or similar ecosystem)
• Experience in modern software development tools / ways of working (e.g. git/GitHub, devops tools, metrics / monitoring, )
• Cloud experience (e.g., AWS, Google Cloud, Azure, Kubernetes), including infrastructure-as-code
• Application experience of CI/CD implementations using git and a common CI/CD stack (e.g. Jenkins, CircleCI, GitLab, Azure DevOps)
• Demonstrated excellence with agile software development environments using tools like Jira and Confluence
• Passionate about data-management and governance/privacy best practice

If you are based in Cambridge, MA; Waltham, MA; Rockville, MD; or San Francisco, CA, the annual base salary for new hires in this position ranges $122,100 to $203,500. The US salary ranges take into account a number of factors including work location within the US market, the candidate's skills, experience, education level and the market rate for the role. In addition, this position offers an annual bonus and eligibility to participate in our share based long term incentive program which is dependent on the level of the role. Available benefits include health care and other insurance benefits (for employee and family), retirement benefits, paid holidays, vacation, and paid caregiver/parental and medical leave. If salary ranges are not displayed in the job posting for a specific country, the relevant compensation will be discussed during the recruitment process.

GSK is an Equal Opportunity Employer. This ensures that all qualified applicants will receive equal consideration for employment without regard to race, color, religion, sex (including pregnancy, gender identity, and sexual orientation), parental status, national origin, age, disability, genetic information (including family medical history), military service or any basis prohibited under federal, state or local law.