Senior Data Security Engineer

What you get to do.
•    Architect and configure Microsoft Purview Information Protection to serve as the central Policy Decision Point (PDP) for file access across multiple enclaves.
•    Translate NIST 8112 metadata attributes into concrete DRM policies (e.g., Allow View ONLY if User.Clearance >= TopSecret AND Device.State = Compliant).
•    Manage the lifecycle of encryption keys (Bring Your Own Key, Customer Managed Keys) to ensure FIPS 140-2/3 compliance and availability across hybrid and air-gapped environments.
•    Define and enforce Rights Management controls that prevent Copy/Paste, Screen Capture, and Printing for documents tagged with specific sensitivity labels (CUI, Secret/NoForn).
•    Integrate Purview sensitivity labels and policies with Microsoft 365, Entra ID conditional access, and supporting data discovery and classification workflows.

Requirements.
•    Active Top Secret/SCI Clearance.
•    Master of Science (MS) in Cybersecurity, Computer Science, Mathematics (Cryptography focus), or a related technical field.
•    Minimum ten (10+) years of technical experience.
•    CompTIA Security+ CE (or higher) to meet DoD 8570 IAT Level II requirements.
•    Minimum five (5+) years of hands-on experience designing and administering Enterprise Digital Rights Management (EDRM) or Information Rights Management (IRM) systems, with deep experience in Microsoft Purview Information Protection, Azure Information Protection (AIP/RMS), or Virtru.
•    Working knowledge of cryptographic protocols (AES-256, RSA), Public Key Infrastructure (PKI), and Key Management Service (KMS) operations.
•    Demonstrated ability to design Attribute-Based Access Control (ABAC) logic and conditional access policies.
•    Understanding of how encryption travels across Cross-Domain Solutions (CDS) and the challenges of key management in air-gapped networks.

 
The Company is an Equal Opportunity/Affirmative Action employer. All qualified candidates will receive consideration for employment without regard to disability, protected veteran status, race, color, religious creed, national origin, citizenship, marital status, sex, sexual orientation/gender identity, age, or genetic information.