Data Protection Architect – DLP & DSPM Lead (Remote)

Highmark Health; Montpelier (VT); On-site; USD 114,000 - 140,000; Full time

Job summary

Highmark Health is seeking a Data Protection Engineer to implement and maintain our data protection infrastructure across on-premises and cloud environments (GCP, AWS, Azure). The role emphasizes DLP, DSPM, de-identification, and policy management in a security-conscious organization.

The ideal candidate brings 5+ years in data protection, information security, and hands-on engineering with DLP tooling, plus strong scripting skills (Python/PowerShell) and cloud architecture experience.

Qualifications

• 5 years of experience with Data Loss Prevention.
• 5 years of experience with Information Security and Systems Analysis.
• 5 years of experience with deploying and maintaining infrastructure for DLP software.
• 5 years of experience with creating and managing DLP policies.
• 3 years of experience with at least two modern programming languages (Python, Java, JavaScript, BASH, PowerShell).
• 3 years of experience with cloud providers (GCP, AWS, Azure).
• Knowledge of HITRUST CSF, NIST 800-53/83, PCI, HIPAA, HITECH, COBIT, ISO 27001/2, ITIL.

Responsibilities

• Implement and maintain data protection infrastructure across platforms.
• Deploy and configure DLP, DSPM, and data de-identification solutions.
• Collaborate on design and implementation of data protection solutions.
• Troubleshoot data protection incidents and perform root cause analysis.
• Develop automation using PowerShell and Python to improve efficiency.
• Stay current with data protection technologies and regulatory requirements.

Skills

DLP

DSPM

Cloud security

Python

PowerShell

Teamwork

Education

Bachelor's degree in Information Security

Master's degree in Information Security

Tools

Purview

ForcePoint

BigID

Varonis

Windows

Linux

GKE

Encryption

Job description

Highmark Health is seeking a Data Protection Engineer to implement and maintain our data protection infrastructure across on-premises and cloud environments (GCP, AWS, Azure). The role emphasizes DLP, DSPM, de-identification, and policy management in a security-conscious organization.

The ideal candidate brings 5+ years in data protection, information security, and hands-on engineering with DLP tooling, plus strong scripting skills (Python/PowerShell) and cloud architecture experience.