Data Protection Architect

Highmark Health; Tennessee; On-site; USD 114,000 - 140,000; Full time

Job summary

Highmark Health is seeking a Data Protection Engineer to own the implementation, maintenance, and operation of our data protection infrastructure across on-prem and cloud environments. You will work with Purview, ForcePoint, BigID, Varonis, and other DSPM/DLP tools to design and maintain secure data handling policies.

The role requires strong programming skills (Python/PowerShell/BASH/JavaScript) and experience across Windows, Linux, and cloud platforms (GCP/AWS/Azure).

Qualifications

• 5 years of experience with Data Loss Prevention
• 5 years of experience with Information Security and Systems Analysis
• 5 years of experience with deploying and maintaining infrastructure for DLP software's
• 5 years of experience with creating and managing DLP policies
• 3 years of experience with at least two modern programming languages (Python, Java, JavaScript, BASH, PowerShell etc.)
• 3 years of experience with designing and providing architectural support to at least two of the following cloud service providers: Google Cloud Platform, Amazon Web Services or Azure
• Strong teamwork and inter-personal skills
• Knowledge of HITRUST CSF, NIST 800-83 cyber security framework, PCI, HIPAA, HITECH, COBIT, ISO 27001/2, and ITIL 3
• Bachelor's degree in Information Security, Information Systems, Information Assurance, Computer Science or related field
• 5 years of Information Security, Governance, Risk and or Compliance, Information Technology or Business Analysis with at least 3 years of experience with hands-on Engineering principles
• Master's degree in Information Security, Information Systems, Information Assurance, Computer Science or related field
• Advanced certification in any of these cloud providers - GCP, AWS or Azure (E.g. Professional Cloud Architect/Security Engineer)
• Language:
• ~ Travel Required:
• ~ Office-Based or Remote Position

Responsibilities

• Implement and maintain components of the organization's data protection infrastructure across various platforms and vendors, ensuring optimal performance and security.
• Collaborate on the design and implementation of data protection solutions, following established best practices and aligning with business requirements.
• Configure and maintain data protection policies across relevant platforms, including configuring sensitive information types, tuning detection parameters, managing exception lists, and etc.
• Troubleshoot and resolve data protection incidents, conducting root cause analysis and escalating complex issues as needed for effective remediation.
• Contribute to data protection projects, assisting with tasks such as testing, implementation, and documentation, and participate in project meetings to provide updates.
• PowerShell, Python) to improve efficiency and support the deployment and maintenance of data protection software, following established coding standards and best practices.
• Actively collaborate with team members to expand technical knowledge and expertise in data protection technologies.
• Stay current with relevant data protection technologies, industry best practices, and evolving compliance requirements.

Skills

DLP security

Teamwork

Compliance knowledge

Information security

Data protection

Education

Bachelor's degree in Information Security, Information Systems, Information Assurance, Computer Science or related field

Master's degree in Information Security, Information Systems, Information Assurance, Computer Science or related field

Advanced cloud certification (GCP/AWS/Azure)

Tools

Python

PowerShell

BASH

Java

JavaScript

GKE

Windows

Linux

Microsoft Purview

ForcePoint

BigID

Varonis

GCP

AWS

Azure

Job description

The Data Protection Engineer is a key member of the Data Protection team, responsible for the implementation, maintenance, and operational support of the organization's data protection infrastructure and applications. The Engineer will participate in complex projects, troubleshoot incidents, and contribute to the development and improvement of Data Protection engineering policies, standards, and procedures. They will work closely with senior engineers to implement and maintain data protection solutions. This role requires expertise in Microsoft Purview, ForcePoint, BigID, Varonis, Windows, Linux, GKE, Encryption, and other data loss prevention (DLP) and data security posture management (DSPM) tools.

Responsibilities

• Implement and maintain components of the organization's data protection infrastructure across various platforms and vendors, ensuring optimal performance and security. This includes deploying and configuring DLP, DSPM, and data de-identification solutions.
• Collaborate on the design and implementation of data protection solutions, following established best practices and aligning with business requirements. This includes working within on-premises and cloud-based environments (GCP, AWS, Azure).
• Configure and maintain data protection policies across relevant platforms, including configuring sensitive information types, tuning detection parameters, managing exception lists, and etc.
• Troubleshoot and resolve data protection incidents, conducting root cause analysis and escalating complex issues as needed for effective remediation.
• Contribute to data protection projects, assisting with tasks such as testing, implementation, and documentation, and participate in project meetings to provide updates.
• PowerShell, Python) to improve efficiency and support the deployment and maintenance of data protection software, following established coding standards and best practices.
• Actively collaborate with team members to expand technical knowledge and expertise in data protection technologies.
• Stay current with relevant data protection technologies, industry best practices, and evolving compliance requirements.

Requirements

• 5 years of experience with Data Loss Prevention
• 5 years of experience with Information Security and Systems Analysis
• 5 years of experience with deploying and maintaining infrastructure for DLP software's
• 5 years of experience with creating and managing DLP policies
• 3 years of experience with at least two modern programming languages (Python, Java, JavaScript, BASH, PowerShell etc.)
• 3 years of experience with designing and providing architectural support to at least two of the following cloud service providers: Google Cloud Platform, Amazon Web Services or Azure
• Strong teamwork and inter-personal skills
• Knowledge of HITRUST CSF, NIST 800-83 cyber security framework, PCI, HIPAA, HITECH, COBIT, ISO 27001/2, and ITIL 3
• Bachelor's degree in Information Security, Information Systems, Information Assurance, Computer Science or related field
• 5 years of Information Security, Governance, Risk and or Compliance, Information Technology or Business Analysis with at least 3 years of experience with hands-on Engineering principles
• Master's degree in Information Security, Information Systems, Information Assurance, Computer Science or related field
• Advanced certification in any of these cloud providers - GCP, AWS or Azure (E.g. Professional Cloud Architect/Security Engineer)
• Language:
• ~ Travel Required:
• ~ Office-Based or Remote Position

Physical work site required

~ It may not contain a comprehensive inventory of all duties, responsibilities, and qualifications required of employees to do this job.

Compliance Requirement: This job adheres to the ethical and legal standards and behavioral expectations as set forth in the code of business conduct and company policies.

As a component of job responsibilities, employees may have access to covered information, cardholder data, or other confidential customer information that must be protected at all times. In connection with this, all employees must comply with both the Health Insurance Portability Accountability Act of 1996 (HIPAA) as described in the Notice of Privacy Practices and Privacy Policies and Procedures as well as all data security guidelines established within the Company's Handbook of Privacy Policies and Practices and Information Security Policy.

This includes but is not limited to adherence to applicable federal and state laws, rules, and regulations as well as company policies and training requirements. 127,100.00 Base pay is determined by a variety of factors including a candidate's qualifications, experience, and expected contributions, as well as internal peer equity, market, and business considerations.

Highmark Health and its affiliates prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities and prohibit discrimination against all individuals based on any category protected by applicable federal, state, or local law.

California Consumer Privacy Act Employees, Contractors, and Applicants Notice