Data Protection Architect — Remote & Cloud DLP Leader

Highmark Health; Minnesota; On-site; USD 114,000 - 140,000; Full time

Job summary

Highmark Health is seeking a Data Protection Engineer to implement and maintain the organization’s data protection infrastructure across on-prem and cloud environments. You will work closely with senior engineers to deploy DLP, DSPM, and de-identification solutions while configuring policies and tuning detections.

The role requires hands-on experience with Purview, ForcePoint, BigID, and Varonis, along with Windows, Linux, and GKE expertise.

Qualifications

• 5 years of experience with Data Loss Prevention.
• 5 years of experience with Information Security and Systems Analysis.
• 5 years of experience deploying and maintaining DLP infrastructure.
• 5 years of experience creating and managing DLP policies.
• 3 years of experience with at least two programming languages (Python, JavaScript, PowerShell, Bash).
• 3 years of experience with at least two cloud providers (GCP, AWS, Azure).
• Knowledge of HITRUST CSF, NIST, PCI, HIPAA, HITECH, COBIT, ISO 27001/2, ITIL 3.

Responsibilities

• Implement and maintain DLP, DSPM, and de-identification solutions.
• Collaborate on design and implementation of data protection in on-prem and cloud environments (GCP, AWS, Azure).
• Configure and maintain data protection policies across platforms.
• Troubleshoot data protection incidents and perform root cause analysis.
• Assist with testing, deployment, and documentation of data protection projects.
• Develop automation using PowerShell and Python to improve deployment and maintenance.
• Collaborate to expand team expertise in data protection technologies.
• Stay current with data protection technologies and compliance requirements.

Skills

Python

PowerShell

JavaScript

Bash

Education

Bachelor's degree

Master's degree

Advanced cloud certification

Tools

Microsoft Purview

ForcePoint

BigID

Varonis

Windows

Linux

GKE

Encryption

DLP/DSPM tools

Job description

Highmark Health is seeking a Data Protection Engineer to implement and maintain the organization’s data protection infrastructure across on-prem and cloud environments. You will work closely with senior engineers to deploy DLP, DSPM, and de-identification solutions while configuring policies and tuning detections.

The role requires hands-on experience with Purview, ForcePoint, BigID, and Varonis, along with Windows, Linux, and GKE expertise.