Solution Engineer, Data Governance

Thank you for considering a career at Ensemble!

Ensemble is a leading provider of technology-enabled revenue cycle management solutions for health systems, including hospitals and affiliated physician groups. They offer end-to-end revenue cycle solutions as well as a comprehensive suite of point solutions to clients across the country.

Ensemble keeps communities healthy by keeping hospitals healthy. We recognize that healthcare requires a human touch, and we believe that every touch should be meaningful. This is why our people are the most important part of who we are. By empowering them to challenge the status quo, we know they will be the difference!

O.N.E Purpose:

• Customer Obsession: Consistently provide exceptional experiences for our clients, patients, and colleagues by understanding their needs and exceeding their expectations.

• Embracing New Ideas: Continuously innovate by embracing emerging technology and fostering a culture of creativity and experimentation.

• Striving for Excellence: Execute at a high level by demonstrating our “Best in KLAS” Ensemble Difference Principles and consistently delivering outstanding results.

The Opportunity:

The Solution Engineer - Data Governance is responsible for the day-to-day operation, configuration, and integration of the data governance and data security platforms owned by the Data Governance department. These include Microsoft Purview (Information Protection, Data Loss Prevention, Insider Risk Management, Data Map, and Unified Catalog), network DLP, user and entity behavior analytics, data security posture management, and the governance capabilities of Databricks Unity Catalog.

This role keeps these tools connected, healthy, and producing reliable results. It onboards new data sources and tools securely and with least privilege, and pulls data from these tools to produce the metrics, reports, and audit evidence that leadership and auditors rely on. Scripting is used to close gaps where native tool capability falls short; it supports the role but is not the main focus. The position works closely with the Data Governance analysts, Cybersecurity Engineering, IT Operations, Data Engineering, and vendors.

Essential Job Functions

• Administer and configure data governance and data security tools to approved standards, including sensitivity labels, DLP and insider risk policies, classification scans, and catalog settings, following change management.
• Onboard data sources to scanning and classification tools, including registering sources, configuring service principals, managed identities, integration runtimes, private connectivity, and secrets, and setting scan scope, schedules, and exclusions.
• Monitor tool health, including scan completion, connector status, policy deployment, and alert flow; troubleshoot and resolve failures, and manage vendor support cases through to resolution.
• Lead the technical review of new tool integrations and vendor deployments. Before change approval, document every account, permission, network change, and data flow the tool requires and validate least privilege. After deployment, verify the environment matches what was approved.
• Integrate governance and security tools with each other and with surrounding platforms (Entra ID, Azure, Databricks, Microsoft 365, SIEM, ITSM), using native connectors first and APIs where needed.
• Support tool evaluations and proofs of concept by turning use cases into test plans and success criteria, standing up test configurations, and documenting results.
• Extract data from tool consoles, audit logs, and APIs to produce recurring metrics such as classification coverage, DLP activity, insider risk alert volume and triage time, and catalog coverage; automate recurring reports and Power BI dashboards.
• Produce configuration and operating evidence for internal audit, regulatory, and client requests.
• Write and maintain scripts (PowerShell, Python, SQL, KQL) to close gaps in native tool functionality and automate repetitive administration.
• Maintain as-built documentation, configuration baselines, SOPs, and runbooks for each tool.
• Work with DLP, insider risk, and stewardship analysts to implement the policy and tuning changes they define.
• Track vendor product changes and roadmaps and assess their impact on current configurations.

Employment Qualifications

• 3+ years administering or engineering enterprise security, compliance, or data platforms, preferably in Microsoft cloud environments.
• Experience in a healthcare or Revenue Cycle Management setting is a plus.
• Bachelors Degree or Equivalent Experience
• Preferred certification in: Microsoft Certified: Information Security Administrator Associate (SC-401), Microsoft Certified: Azure Security Engineer Associate (AZ-500), or Microsoft Certified: Azure Administrator Associate (AZ-104).
• Hands-on administration of Microsoft Purview (DLP, Information Protection, Insider Risk Management, Data Map, or Unified Catalog).
• Working knowledge of Azure identity and infrastructure: Entra ID app registrations and service principals, RBAC, managed identities, Key Vault, private endpoints, and Azure Policy.
• Familiarity with the Databricks Unity Catalog permissions model.
• Scripting in PowerShell (including Security & Compliance PowerShell and Microsoft Graph) and Python; working proficiency in SQL and KQL.
• Experience with Power BI or similar reporting tools.
• Experience working within formal change management (e.g., ServiceNow CAB).
• Familiarity with DSPM, DLP, and UEBA platforms; exposure to dedicated catalog platforms is a plus.
• Understanding of compliance requirements with regulations such as HIPAA, and strong analytical and problem-solving skills.
• Excellent communication and stakeholder management abilities; familiarity with healthcare data such as EHR, ICD/CPT, and SNOMED/LOINC is a plus.
• Must be inquisitive and demonstrate openness to innovation including AI to explore better processes and ways to alleviate friction and improve patient and client experiences.
• This is a remote position; however, candidates must be willing and able to travel to and work onsite at client, temporary, or corporate office locations as business needs require.
• This position pays between $101,600- 152,400 based on experience.
  

Join an award-winning company

Five-time winner of “Best in KLAS” 2020-2022, 2024-2025

Black Book Research's Top Revenue Cycle Management Outsourcing Solution 2021-2024

22 Healthcare Financial Management Association (HFMA) MAP Awards for High Performance in Revenue Cycle 2019-2024

Leader in Everest Group's RCM Operations PEAK Matrix Assessment 2024

Clarivate Healthcare Business Insights (HBI) Revenue Cycle Awards for strong performance 2020, 2022-2023

Energage Top Workplaces USA 2022-2024

Fortune Media Best Workplaces in Healthcare 2024

Monster Top Workplace for Remote Work 2024

Great Place to Work certified 2023-2024

• Innovation
• Work-Life Flexibility
• Leadership
• Purpose + Values

Bottom line, we believe in empowering people and giving them the tools and resources needed to thrive. A few of those include:

• Associate Benefits – We offer a comprehensive benefits package designed to support the physical, emotional, and financial health of you and your family, including healthcare, time off, retirement, and well-being programs.
• Our Culture – Ensemble is a place where associates can do their best work and be their best selves. We put people first, last and always. Our culture is rooted in collaboration, growth, and innovation.
• Growth – We invest in your professional development. Each associate will earn a professional certification relevant to their field and can obtain tuition reimbursement.
• Recognition – We offer quarterly and annual incentive programs for all employees who go beyond and keep raising the bar for themselves and the company.

Ensemble is an equal employment opportunity employer. It is our policy not to discriminate against any applicant or employee based on race, color, sex, sexual orientation, gender, gender identity, religion, national origin, age, disability, military or veteran status, genetic information or any other basis protected by applicable federal, state, or local laws. Ensemble also prohibits harassment of applicants or employees based on any of these protected categories.

Due to business, operational, payroll, and regulatory requirements, this position is limited to individuals who reside and are authorized to work within the United States. Applications generated from outside the United States will not be considered. Individuals may reapply when located within the United States.

Ensemble provides reasonable accommodations to qualified individuals with disabilities in accordance with the Americans with Disabilities Act and applicable state and local law. If you require accommodation in the application process, please contact TA@ensemblehp.com.

This posting addresses state specific requirements to provide pay transparency. Compensation decisions consider many job-related factors, including but not limited to geographic location; knowledge; skills; relevant experience; education; licensure; internal equity; time in position. A candidate entry rate of pay does not typically fall at the minimum or maximum of the role’s range.

Employment Disclaimers – Ensemble