Data Protection Architect (Remote) – DLP/DSPM Expert

Highmark Health; Lansing (MI); Hybrid; USD 114,000 - 140,000; Full time

Job summary

Highmark Health is seeking a Data Protection Engineer to implement and maintain our data protection infrastructure. You will work on DLP, DSPM, and data de-identification across on-prem and cloud environments, using tools like Purview, ForcePoint, BigID, and Varonis.

The role involves incident analysis, policy tuning, and collaboration with senior engineers to improve security posture. You should have 5+ years in data loss prevention and information security, strong scripting skills, and

Qualifications

• Minimum 5 years in Data Loss Prevention and information security.
• Experience deploying and maintaining DLP/DSPM infrastructure.
• Hands-on with scripting languages such as Python or PowerShell.
• Familiarity with cloud providers (GCP/AWS/Azure) and on-prem setups.
• Knowledge of HITRUST CSF, NIST, PCI, HIPAA and ISO 27001/2.

Responsibilities

• Implement and maintain data protection components across platforms.
• Configure DLP/DSPM policies, detect/mitigate sensitive data exposure.
• Troubleshoot incidents, perform root cause analysis and remediation.
• Collaborate on design of data protection solutions for cloud and on‑prem.
• Assist with testing, documentation, and compliance alignment.

Skills

Data Loss Prevention

Information Security

DLP Infrastructure

DLP Policies

Python

PowerShell

Cloud Providers

Windows

Linux

MS Purview/Tools

Education

Bachelor's degree in Information Security

Master's degree in Information Security

Tools

PowerShell

Python

Windows

Linux

GKE

Microsoft Purview

ForcePoint

BigID

Varonis

Job description

Highmark Health is seeking a Data Protection Engineer to implement and maintain our data protection infrastructure. You will work on DLP, DSPM, and data de-identification across on-prem and cloud environments, using tools like Purview, ForcePoint, BigID, and Varonis.

The role involves incident analysis, policy tuning, and collaboration with senior engineers to improve security posture. You should have 5+ years in data loss prevention and information security, strong scripting skills, and