data protection engineer

Lakeview Loan Servicing

<div>Overview:
<div>
The <b>Data Protection Engineer (DPE)</b> is responsible for designing, implementing, and maintaining corporate data protection solutions that safeguard sensitive company and customer information. This role focuses on the hands-on configuration, operation, and continuous improvement of data protection technologies and controls across cloud, endpoint, email, and data platforms.</div><div><br>
The DPE works closely with IT Security, Compliance, Legal, and business stakeholders to translate data protection requirements into practical technical controls. This position requires a strong understanding of data loss prevention, data classification, information protection, regulatory compliance, and emerging data security threats to ensure the confidentiality, integrity, and availability of regulated and sensitive data.</div><div></div><div><br>
This is an individual contributor/self-starter role, that is business minded and execution-focused, requiring strong technical proficiency, attention to detail, and the ability to operate effectively within a corporate environment.</div><div></div><div><br>
This role can be remote anywhere in the country. The salary range for this role is $130,000 to $175,000, plus an annual bonus. However Lakeview considers several factors when extending an offer, including but not limited to, the roles and associated responsibilities, a candidate's work experience, education/training, location and key skills.</div>
Responsibilities:
<ul><li>
Design, deploy, configure, and maintain data protection solutions across endpoints, networks, cloud services, email systems, and collaboration platforms.</li><li>
Customize and fine-tune data protection policies, rules, and classifiers.</li><li>
Define and maintain data classification schemes and sensitivity labels.</li><li>
Fine-tune data protection policies, rules and detection algorithms to minimize false positives.</li><li>
Define and refine data classification labels, configurations and control parameters.</li><li>
Ability to troubleshoot sensitivity label issues with end users.</li><li>
Develop automated workflows to enhance data security and reduce manual intervention.</li><li>
Monitor and triage data protection alerts and incidents.</li><li>
Implement and operate DSPM controls, data discovery, posture assessments, and exposure remediation.</li><li>
Documentation of systems designs, configurations and support processes including, but not limited to, creating/maintaining conceptual, logic and system diagrams, standard operating procedures and playbooks, and configuration guides.</li><li>
Ensure data protection policies align with company and regulatory requirements, as well as industry regulations (e.g., GLBA, CCPA, NYDFS)</li><li>
Work closely with compliance and legal teams to enforce data protection requirements.</li><li>
Provide technical guidance on emerging threats and data security trends.</li><li>
Support data flow mapping, risk assessments, and remediation efforts.</li><li>
Participate in architecture reviews and change management activities.</li><li>
Stay current on data security trends and technologies.</li><li>
Integrate data protection platforms with SIEM and IAM systems.</li><li>
Perform other duties as assigned.</li></ul><br>
<div></div>
Qualifications:
<ul><li>Bachelor&rsquo;s degree in Cybersecurity, Information Technology, Computer Science, or a related field (or equivalent experience).</li><li>
8+ years of experience in DLP engineering.</li><li>
Strong, hands-on experience with Microsoft Purview (Data Loss Prevention and Information Protection) and Microsoft Defender.</li><li>
Experience with Microsoft Defender for Cloud and/or Netskope is a plus.</li><li>
Strong knowledge of encryption, data classification, network security, endpoint protection, and cloud security principles.</li><li>
Scripting (e.g., Python and PowerShell) and automation skills are a plus.</li><li>
Solid understanding of regular expression and regex-based pattern matching.</li><li>
Experience with enterprise support request and trouble ticketing solutions, such as ServiceNow and Jira.</li><li>
Familiar with support process implementation and improvement.</li><li>
Understanding data protection laws, compliance frameworks, and industry best practices.</li></ul><p></p><p><b><br>
Knowledge and Skills Required:
</b></p><ul><li>Strong problem-solving and analytical skills with attention to detail.</li><li>
Ability to work independently and collaboratively in a fast-paced environment.</li><li>
Self-starter with strong interpersonal, written and verbal communication skills and the ability to interact with technical and non-technical stakeholders.</li></ul><p><b>
Certifications</b></p><ul><li>
CISSP, CISA, CEH, CCSP, or Microsoft Certified preferred</li></ul><div></div><h1 class="jobSectionHeader"><b><br>
Location &amp; Compensation</b></h1><ul><li>
The annual salary for this role ranges between $130-175K depending on the individual&rsquo;s experience.</li><li>
Role can be 100% fully remote depending on geographic location</li></ul><div></div><h1 class="jobSectionHeader"><b><br>
Physical Demands and Work Environment</b></h1><div>
The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.</div><div></div><div><br>
While performing the duties of this job, the employee is regularly required to sit and use hands to handle, touch or feel objects, tools, or controls. The employee frequently is required to talk and hear. The noise level in the work environment is usually moderate. The employee is occasionally required to stand; walk; reach with hands and arms. The employee is rarely required to stoop, kneel, crouch, or crawl. The employee must regularly lift and/or move up to 10 pounds. Specific vision abilities required by this job include close vision, color vision, and the ability to adjust focus.</div><div></div><h1 class="jobSectionHeader"><b><br>
EEOC</b></h1><div>
Lakeview is an Equal Employment Opportunity employer. All aspects of consideration for employment and employment with the Company are governed on the basis of merit, competence and qualifications without regard to race, color, religion, sex, national origin, age, disability, veteran status, sexual orientation, or any other category protected by federal, state, or local law.</div></div>

Data Protection Engineer

Leidos

<div><p><b>Description</b>
</p><p>Leidos has an immediate need for a highly skilled and versatile <b>Senior Data Protection Engineer (Trellix)</b> to join the Network Execution Team supporting a critical Zero Trust initiative at U.S. Special Operations Command (USSOCOM). This role is essential for the tactical implementation of data-centric security controls across the Command's hybrid environment, ranging from commercial cloud capabilities on NIPR to the rigid, disconnected constraints of the SIPR and Top-Secret networks.</p><p></p><p>
As a <b>Sr.</b> <b>Data Protection Engineer (Trellix) </b>, you will be the primary &quot;hands-on-keyboard&quot; implementer responsible for configuring, deploying, and tuning the encryption and labeling technologies that protect the Command's most sensitive data. You will translate the high-level architecture defined by the Chief Architect into concrete, enforceable policies within Microsoft Purview (for NIPR) and enterprise DRM platforms like Virtru or Kiteworks (for SIPR/Top Secret). You will move the Command from a passive &quot;audit&quot; posture to an active &quot;block&quot; posture, ensuring that data is encrypted and persistent protection travels with the file, regardless of where it is stored or transferred.</p><p></p><p><b>
Responsibilities</b></p><ul><li><p><b>
Microsoft Purview Implementation (NIPR):</b> Configure and deploy Sensitivity Labels, Auto-labeling policies, and Data Loss Prevention (DLP) rules within the Microsoft 365 E5 suite to classify and protect CUI and PII in SharePoint, OneDrive, and Exchange.</p></li><li><p><b>
DRM &amp; Encryption Configuration (SIPR/Top Secret):</b> Implement and manage enterprise Digital Rights Management (DRM) solutions (specifically Virtru or Kiteworks) to enforce encryption-at-rest and attribute-based access control on classified networks.</p></li><li><p><b>
Policy Tuning &amp; Enforcement:</b> Oversee the phased transition of security policies from &quot;Monitoring&quot; mode to &quot;Blocking&quot; mode, analyzing false positives and tuning classifiers (Regex, Keyword Dictionaries, Trainable Classifiers) to minimize mission disruption.</p></li><li><p><b>
Endpoint Protection:</b> Collaborate with the Trellix engineering team to ensure that data tags applied by Purview/DRM tools are correctly recognized and enforced by endpoint DLP agents on workstations.</p></li><li><p><b>
Cross-Domain Support:</b> Assist in the manual &quot;sneaker-net&quot; transfer of policy updates and classification patterns to the air-gapped Top Secret environment, ensuring configuration consistency across all networks</p></li></ul><p></p><p><b>
Qualifications</b></p><p><b>
Security Clearance: </b>Active Top-Secret clearance with SCI eligibility (TS/SCI).</p><p><b>
Education:</b> Master&rsquo;s degree in Systems Engineering, Computer Science, Cybersecurity, Electrical Engineering, or a related technical field. Additional years of experience may be considered in leiu of a degree.</p><p><b>
Experience: </b>10+ years of relevant technical experience.</p><p></p><p><b>
Required Experience &amp; Skills:</b></p><ul><li><p>
Experience with <b>Trellix DLP</b> (formerly McAfee) endpoint products</p></li><li><p><b>
Microsoft Purview Expertise:</b> Significant (3+ years) hands-on experience configuring Microsoft Information Protection (MIP), Sensitivity Labels, and DLP policies in a large enterprise or DoD environment.</p></li><li><p><b>
DRM/Encryption Experience:</b> Proven experience implementing and managing enterprise encryption and Rights Management tools such as <b>Virtru</b>, <b>Kiteworks</b>, or <b>Seclore</b>, particularly in on-premise or hybrid configurations.</p></li><li><p><b>
Data Classification:</b> Strong understanding of data classification methodologies, including the creation of custom sensitive info types (SITs) using Regex and Exact Data Match (EDM).</p></li><li><p><b>
Technical Troubleshooting:</b> Ability to diagnose and resolve complex issues related to encryption key management, policy propagation, and agent conflicts.</p></li><li><p><b>
Certification Required:</b> CompTIA Security+ CE (or higher) to meet DoD 8570 IAT Level II requirements.</p></li></ul><p></p><p><b>
Preferred Qualifications:</b></p><ul><li><p>
Knowledge of <b>NetApp BlueXP</b> or <b>BigID</b> for data discovery.</p></li><li><p>
Prior experience supporting USSOCOM or working on SIPRNet/JWICS systems.</p></li><li><p>
Familiarity with DoD Data Strategy and CUI handling requirements.</p></li></ul><p></p><p><b>
Preferred Certifications:</b></p><ul><li><p>
Microsoft Information Protection Administrator (SC-400).</p></li><li><p>
Virtru Certified Professional or Kiteworks Administrator Certification.</p></li></ul><p>
If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo &mdash; because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 &mdash; and moving faster than anyone else dares.</p><h2 class="jobSectionHeader"><b>
Original Posting:</b></h2>
March 18, 2026<p></p><p><br>
For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.</p><p></p><h2 class="jobSectionHeader"><b><br>
Pay Range:</b></h2>
Pay Range $131,300.00 - $237,350.00<p></p><p>
The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.</p><p></p><p><b>
About Leidos</b></p><p></p><p>
Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $16.7 billion for the fiscal year ended January 3, 2025. For more information, visit www.Leidos.com.</p><p></p><p><b>
Pay and Benefits</b></p><p></p><p>
Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available at www.leidos.com/careers/pay-benefits.</p><p></p><p><b>
Securing Your Data</b></p><p></p><p>
Beware of fake employment opportunities using Leidos&rsquo; name. Leidos will never ask you to provide payment-related information during any part of the employment application process (i.e., ask you for money), nor will Leidos ever advance money as part of the hiring process (i.e., send you a check or money order before doing any work). Further, Leidos will only communicate with you through emails that are generated by the Leidos.com automated system &ndash; never from free commercial services (e.g., Gmail, Yahoo, Hotmail) or via WhatsApp, Telegram, etc. If you received an email purporting to be from Leidos that asks for payment-related information or any other personal information (e.g., about you or your previous employer), and you are concerned about its legitimacy, please make us aware immediately by emailing us at LeidosCareersFraud@leidos.com.</p><p>
If you believe you are the victim of a scam, contact your local law enforcement and report the incident to the U.S. Federal Trade Commission.</p><p></p><p><b>
Commitment to Non-Discrimination</b></p><p></p><p>
All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.</p></div>

Sr. Data Protection Engineer (Trellix)

Americold Logistics

<div><div>What you&rsquo;ll Do
<br>
<ul><li>The Sr. Storage &amp; Data Protection Engineer will be responsible for designing, implementing, and managing the infrastructure storage &amp; data protection solutions that support our business operations. This role requires a deep understanding of storage infrastructure technologies, excellent problem-solving skills, and the ability to work collaboratively with cross-functional teams.
</li><li>Provide expert-level administration for NetApp storage platforms, including AFF &amp; ASA running Data ONTAP 9.x clustered systems.
</li><li>Manage and maintain NetApp clusters, SVMs, LIFs, RAID DP, Aggregates, Volumes, and luns.
</li><li>Expert-level experience and knowledge of NetApp hardware, multi-node NetApp clusters.
</li><li>Install, configure, and oversee NetApp management software, including Snapvault &amp; Snapmirror.
</li><li>Design and manage SAN switching fabrics, specifically Brocade, including zoning and protocol management (Fibre Channel, iSCSI).
</li><li>Execute complex system upgrades, data migrations, and lifecycle management activities.
</li><li>Monitor system performance and capacity, providing regular reporting and proactive tuning.
</li><li>Troubleshoot complex end-to-end issues spanning storage, SAN, backup, and OS layers.
</li><li>Expert-level administration of SAN switching (Brocade preferred) and associated protocols.
</li><li>Design and manage end-to-end SAN connectivity, ensuring low-latency paths for mission-critical applications.
</li><li>Develop server and storage strategies, including direction on new technologies, platform virtualization and consolidation, and protocol standards (iSCSI, FC, NFS, etc.).
</li><li>Expert-level experience in Data Protection strategies for Storage systems, VMs and developing recovery strategies.
</li><li>Create and maintain technical documentation, including SOPs, installation guides, and troubleshooting scripts.
</li><li>Participate in a scheduled on-call rotation to provide off-hours support for critical infrastructure.
</li><li>Architect and manage enterprise backup strategies using Commvault to guarantee data integrity and recoverability.
</li><li>Develop, implement, and regularly test disaster recovery (DR) topologies and business continuity plans.
</li><li>Expert-level experience in DR/replication technologies like Zerto.
</li><li>Conduct regularly scheduled audits of backup sets, recovery procedures, and DR readiness.
</li><li>Configure and manage Commvault Air Gap Protect and immutable storage to physically and logically isolate backup data from the production network.
</li><li>Administer Zero-Trust access controls, including Multi-Factor Authentication (MFA), Multi-Person Authorization (MPA) for critical deletions, and granular Role-Based Access Control (RBAC).
</li><li>Plan for future growth by evaluating and integrating emerging off-site and cloud-based technologies.
</li><li>Expert-level skills on VMWare infrastructure and provisioning storage.
</li></ul></div><p>What Experience and Education You Need
</p><ul><li>Experience: 7+ years of technical related experience in enterprise storage and data protection.
</li><li>Education: BS in Computer Science or an equivalent combination of education and professional experience.
</li><li>NetApp Expertise: Deep technical knowledge of NetApp hardware, ONTAP software, and upgrade paths.
</li><li>Backup Expertise: Advanced proficiency with Commvault (preferred) or equivalent enterprise backup solutions.
</li><li>Networking: Strong understanding of TCP/IP networking and protocols (SMB, CIFS, NFS).
</li><li>SAN Management: Expert knowledge of SAN connectivity, specifically Brocade or Cisco MDS.
</li><li>VMware/Linux/Unix: Solid administration skills in a virtualized environment running Window, Linux, and Unix environment (RHEL, Oracle Linux).
</li><li>Automation: Proficiency in scripting (Bash, Python, or PowerShell) for task automation and reporting.
</li></ul><p>What Could Set You Apart
</p><ul><li>Innovative Thinking: Ability to think outside the box and propose creative solutions to complex infrastructure challenges.
</li><li>Advanced Cloud Expertise: Deep understanding and hands-on experience with multiple cloud platforms (e.g., AWS, Azure, Google Cloud).
</li><li>Automation Proficiency: Expertise in using automation tools (e.g., Ansible, Terraform) to streamline infrastructure management.
</li><li>Security Focus: Strong knowledge of cybersecurity, best practices and experience implementing secure infrastructure solutions.
</li><li>Leadership and Mentorship: Proven ability to lead and mentor technical teams, fostering a collaborative and growth-oriented environment.
</li><li>Project Management: Strong project management skills, with the ability to manage multiple projects simultaneously and deliver on time.
</li><li>Adaptability: Ability to quickly adapt to new technologies and changing business requirements.
</li><li>Preferred Certifications: NetApp: NCDA (ONTAP), NCIE (SAN or Data Protection) or Commvault: Commvault Certified Professional.
</li></ul><p>Physical Requirements
</p><ul><li>Requires the ability to sit for long periods of time, with frequent interruptions.
</li><li>Requires several hours per day of sitting, getting up and down from chairs, and reaching, or bending.
</li><li>Requires manual dexterity with normal hand and finger movements for typical office work.
</li><li>Talking, hearing, and seeing are important elements of completing assigned tasks.
</li><li>May require travel by automobile and airplane for business.
</li><li>May require visits to warehouse operations in temperatures at or below freezing.
</li><li>May require carrying loads related to travel and the occasional lifting, carrying, positioning, and/or moving of objects weighing up to 20 pounds.
</li></ul><br>
Americold is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, pregnancy, genetic information, disability, status as a protected veteran, or any other protected category under applicable federal, state, and local laws. EOE/AA M/F/D/V DFW.</div><p></p>

Sr Storage & Data Protection Engineer

ValueBase Consulting

<div><p><b>Data Protection &amp; Microsoft Purview Engineer</b><br>
<b>Denver, CO / Minneapolis, MN (Local Candidates Only)</b><br>
<b>3-Month Contract-to-Hire</b><br>
<b>W2 Only (GC / U.S. Citizens Only)</b><br>
<b>Up to $80/hour (W2)</b></p>
<p><b>Job Summary</b></p>
<p>We are seeking a highly skilled <b>Data Protection &amp; Microsoft Purview Engineer</b> for a contract-to-hire opportunity. This role will focus on assessing, optimizing, and supporting Microsoft Purview implementations, with an emphasis on data protection, compliance, and operational efficiency.</p>
<p>Candidates <b>must be local</b> to <b>Denver, CO or Minneapolis, MN</b>.</p>
<p><b>Required Qualifications</b></p>
<ul><li>5+ years of experience in <b>data protection, data security, or cloud security</b></li>
<li>Strong hands-on expertise with <b>Microsoft Purview</b>, including:
<ul><li>Information Protection</li>
<li>Data Loss Prevention (DLP)</li>
<li>Sensitive Information Types (SITs)</li>
<li>eDiscovery</li>
<li>Insider Risk Management</li>
</ul></li><li>Solid understanding of <b>Microsoft E5 Security &amp; Compliance</b></li>
<li>Experience evaluating and/or implementing <b>data protection tools</b></li>
<li>Strong communication and stakeholder collaboration skills</li>
</ul>
<p><b>Preferred Qualifications</b></p>
<ul><li>Experience with <b>labeling taxonomy redesign</b></li>
<li>Background working in <b>compliance-driven environments</b></li></ul></div>

Data Protection & Microsoft Purview Engineer

Cybersheath

<div><p>CyberSheath Services International LLC is a rapidly growing Managed Services Provider primarily focused on providing CMMC Compliance and Cybersecurity services to the Defense Industrial Base (DIB). We are excited to be expanding our staff due to our growth and are looking to add to our team!</p>
<p>
CyberSheath integrates compliance and threat mitigation efforts and eliminates redundant security practices that don't improve and, in fact, may weaken an organization's security posture. Our professionals advise clients where to stop spending, where to invest, and how to take what they are already doing and integrate it in a way that delivers improved security.</p>
<p>
Successful candidates for CyberSheath are self-motivated, think out of the box, work, and solve issues independently. Confident, 'doers' who 'get the job done' and strive to 'do the right thing, even when no-one is looking' are the types of candidates who strive in our culture. Additionally, our most successful team members are self-starters and willing to put on many hats to succeed. CyberSheath is fast-growing and seeks candidates who want to be part of our upward trajectory.</p>
<p>
The CMMC Compliance Engineer will be responsible for designing, implementing, and maintaining data protection controls that safeguard Controlled Unclassified Information (CUI) across Microsoft 365 and Azure environments in alignment with CMMC Level 2 and NIST 800-171 requirements.<br>
<br>
<b>Key Responsibilities</b></p>
<ul><li>Design, deploy, and manage Microsoft Purview Data Loss Prevention (DLP) policies across Exchange Online, SharePoint Online, OneDrive, Teams, and endpoint workloads.</li><li>Implement and maintain Microsoft Purview sensitivity labels, including label taxonomy, protection settings, encryption, and user experience alignment.</li><li>Configure and enforce auto-labeling and trainable classifiers to identify and protect CUI, export-controlled data, and other regulated data types.</li><li>Integrate DLP and labeling controls with Conditional Access, endpoint controls, and Defender workloads to support defense-in-depth.</li><li>Tune DLP policies to balance compliance enforcement with business usability, minimizing false positives while maintaining audit integrity.</li><li>Support audit readiness and evidence collection, including documentation of DLP configurations, labeling schemas, policy enforcement, and control mappings to NIST 800-171 and CMMC practices.</li><li>Collaborate with compliance, security operations, and engineering teams to remediate data handling gaps identified through assessments, audits, or incident response activities.</li></ul><br>
<b>
Required Experience</b>
<ul><li>Hands-on experience implementing Microsoft Purview DLP in regulated or compliance-driven environments.</li><li>Practical experience with sensitivity labels, encryption, content marking, and access restrictions.</li><li>Experience protecting CUI or similarly regulated data within Microsoft 365.</li><li>Strong understanding of how DLP and information protection map to CMMC Level 2 / NIST 800-171 requirements.</li><li>Experience supporting compliance audits or assessments with technical evidence and configuration artifacts.</li></ul><br>
<b>
Preferred Experience</b>
<ul><li>Experience in GCC or GCC High Microsoft environments.</li><li>Familiarity with Endpoint DLP, Insider Risk Management, or Information Governance features.</li><li>Experience integrating DLP with Defender for Endpoint, Microsoft Sentinel, or SOAR workflows.</li><li>Background working with DoD contractors or highly regulated industries.</li></ul><p><b><br>
Work Environment</b></p>
<ul>
<li>100% Remote work environment with occasional (25%) travel to client sites</li>
</ul>
<p><i>CyberSheath is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender identity, national origin, age, protected veteran status, among other things, or status as a qualified individual with a disability.</i></p></div>

Compliance Engineer

Charles Schwab

<div><h2 class="jobSectionHeader"><b>Your opportunity</b></h2><p><br>
At Schwab, you&rsquo;re empowered to make an impact on your career. Here, innovative thought meets creative problem solving, helping us &ldquo;challenge the status quo&rdquo; and transform the finance industry together.</p><p></p><div><br>
We believe in the importance of in-office collaboration and fully intend for the selected candidate for this role to work on site in the specified location(s).<br>
</div><div></div><div>At Schwab, you are empowered to make an impact on your career. Here, innovative thought meets creative problem solving, helping us &ldquo;challenge the status quo&rdquo; and transform the finance industry together. Schwab&rsquo;s Cybersecurity organization is the first line of defense for the Firm. The Senior Security Engineer of the Public Key Infrastructure (PKI) team will play a key role on a team of cyber security data protection subject matter experts and engineers to create, implement, and maintain PKI controls using on-prem, SaaS, and IaaS cloud-based solutions to reduce risk and enforce Schwab&rsquo;s security policies and standards for data protection. You are a driven senior engineer with a deep passion to be an accelerator and change agent with the ability to build a security community and progressive Dev/SEC/Op&rsquo;s culture.</div><div></div><div><br>
You will be responsible for innovating, developing, and implementing groundbreaking PKI capabilities to secure data in on-prem, SaaS, and IaaS workloads. You have in-depth experience in managing and deploy Public Key Infrastructure environments, Certificate Authorities (CA), and in maintaining the lifecycle of X.509 certificates across large corporate enterprise environments. This role requires expertise in the cybersecurity industry.</div><div>
Responsibilities Include, but not Limited to:</div><ul><li>
Perform senior engineering responsibilities as part of a team and work with partners to architect and deploy PKI infrastructure, including Certificate Authorities (CAs), Registration Authorities (RAs), and Hardware Security Modules (HSMs).</li><li>
Implement and maintain the issuance and management of digital certificates for users, servers, and devices across the organization.</li><li>
Define certificate lifecycle management policies (issuance, renewal, revocation).</li><li>
Integrate PKI with other security systems like authentication and access control mechanisms.</li><li>
Conduct regular security assessments and audits of PKI systems to identify vulnerabilities and potential risks.</li><li>
Work with other IT teams to integrate PKI solutions into existing systems and applications.</li><li>
Maintain close ties to various stakeholders, developers, and engineers across the company, ensuring the services we create meet their needs as products evolve.</li><li>
Communicate extensively with Data Protection Product and engineering teams across the organization.</li><li>
Drive complex technical initiatives to full delivery leveraging knowledge of Cyber security practices, software engineering principles, agile frameworks, and customer engagement.</li><li>
Design, build, and maintain infrastructure to meet the organization&rsquo;s requirements and ensure high availability.</li><li>
Applying adept understanding and experience with systems automation platforms and technologies.</li></ul><h2 class="jobSectionHeader"><b>
What you have</b></h2><div><br>
Required:</div><ul><li>
5+ years of hands-on experience in network security, data security, and/or other cybersecurity-related controls and technologies.</li><li>
Automation via Certificate Lifecycle Management tools using scripting and coding (Venafi, PowerShell, and Python knowledge required; GitHub and .Net knowledge highly desired)</li><li>
Bachelor&rsquo;s Degree in computer science or related field highly preferred.</li><li>
Ability to foster collaborative, open, working relationships with technology groups and other stakeholders, including vendor relationships.</li><li>
Clear communication skills and ability to interact effectively at multiple levels of an organization, and to influence leadership (Including translating technical information based on specific audiences).</li><li>
Experience implementing multiple high-visibility and high-impact enterprise cybersecurity projects with cross-functional teams while maintaining superior results including planning, development and management of technical requirements, design, testing and deployment of security solutions.</li><li>
Strong understanding of Public Key Infrastructure (PKI) principles.</li><li>
Expertise in PKI technologies like Microsoft Active Directory Certificate Services (AD CS), Entrust, Venafi, or other commercial PKI solutions.</li><li>
Experience with managing Hardware Security Modules (HSMs).</li></ul><div>
Preferred:</div><ul><li>
Multiple certifications in cybersecurity and data protection cybersecurity highly preferred (CISSP, GIAC, CISM, CCSP, CISA, or Security+, or other related certifications).</li></ul><div>
&ldquo;In addition to the salary range, this role is also eligible for bonus or incentive opportunities.&rdquo;</div><div></div><div><h2 class="jobSectionHeader"><b><br>
What&rsquo;s in it for you</b></h2><p>
At Schwab, you&rsquo;re empowered to shape your future. We champion your growth through meaningful work, continuous learning, and a culture of trust and collaboration&mdash;so you can build the skills to make a lasting impact. Our Hybrid Work and Flexibility approach balances our ongoing commitment to workplace flexibility, serving our clients, and our strong belief in the value of being together in person on a regular basis.</p><p>
We offer a competitive benefits package that takes care of the whole you &ndash; both today and in the future:</p><ul><li>
401(k) with company match and Employee stock purchase plan</li><li>
Paid time for vacation, volunteering, and 28-day sabbatical after every 5 years of service for eligible positions</li><li>
Paid parental leave and family building benefits</li><li>
Tuition reimbursement</li><li>
Health, dental, and vision insurance</li></ul></div></div>

Senior PKI and Cryptography Engineer

Booz Allen Hamilton

<div>Data Security Engineer, Mid<p><b>
The Opportunity:</b></p><p>
Architect, deploy, and configure data security solutions across various clients for DoD, IC, and civilian federal clients. Create new architectures to meet client requirements adhering to Zero Trust best practices and IC data header guidelines. Interface with key stakeholders, including agency personnel and internal delivery and engineering teams. Assist in building custom policy to ensure positive control of data across hybrid cloud environments.</p><p></p><p><b>
You Have:</b></p><ul><li>
Experience in a professional work environment</li><li>
Knowledge of Data Loss Prevention concepts and capabilities</li><li>
Knowledge of Data Protection and Data Security concepts</li><li>
Knowledge of policy creation, deployment and troubleshooting</li><li>
Knowledge of container services such as Kubernetes</li><li>
Knowledge of documenting and diagraming technical architectures</li><li>
Ability to demonstrate a desire to learn new capabilities across the data protection market</li><li>
Secret clearance</li><li>
HS diploma or GED</li></ul><p></p><p><b>
Nice If You Have:</b></p><ul><li>
Knowledge of Trusted Data Format (TDF) and Attribute-Based Access Control (ABAC) concepts</li><li>
Knowledge of Virtru Data Security Platform (DSP) or identity solutions such as Keycloak</li><li>
Knowledge of federal, DoD, or IC environments or compliance frameworks</li><li>
Bachelor&rsquo;s degree in IT, Cybersecurity, Engineering, or a related field</li></ul><p></p><p><b>
Clearance</b><b>:</b></p><p>
Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; Secret clearance is required.</p><p></p><p><b>
Compensation</b></p><p>
At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen&rsquo;s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.</p><p></p>
Salary at Booz Allen is determined by various factors, including but not limited to location, the individual&rsquo;s particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $69,400.00 to $158,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen&rsquo;s total compensation package for employees. This posting will close within 90 days from the Posting Date.<p></p><p><b>
Identity Statement</b></p><p>
As part of the application process, you are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.</p><p></p><p><b>
Work Model</b><br>
Our people-first culture prioritizes the benefits of flexibility and collaboration, whether that happens in person or remotely.</p><ul><li>
If this position is listed as remote or hybrid, you&rsquo;ll periodically work from a Booz Allen or client site facility.</li><li>
If this position is listed as onsite, you&rsquo;ll work with colleagues and clients in person, as needed for the specific role.</li></ul><p></p><p><b>
Commitment to Non-Discrimination</b></p><p>
All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.</p></div><p></p>

Data Security Engineer, Mid

Search 10000+ Data protection engineer jobs near you this March. New roles added regularly across leading industries. Apply today.