Data Protection Engineer

highmarkhealth; United States; Remote; USD 110,000 - 180,000; Full time

Job summary

enGen seeks a Data Protection Engineer to join the team, focusing on implementing and maintaining DLP and DSPM solutions across on-prem and cloud environments. You will work with Purview, ForcePoint, BigID, and Varonis, deploying policies and automating tasks to improve security posture.

The role requires strong collaboration with senior engineers and compliance awareness with HITRUST/NIST/ISO controls, plus experience with Windows, Linux, and Kubernetes; travel is minimal.

Qualifications

• Minimum 5 years in Data Loss Prevention (DLP)
• Minimum 5 years in Information Security and systems analysis
• Minimum 5 years deploying and maintaining DLP infrastructure
• Minimum 5 years creating and managing DLP policies

Responsibilities

• Implement and maintain data protection infrastructure across on-prem and cloud platforms (DLP, DSPM, data de-identification).
• Collaborate on designing data protection solutions aligned with business requirements.
• Configure and maintain data protection policies across platforms and tune detection parameters.
• Troubleshoot data protection incidents and conduct root cause analysis.
• Assist with testing, implementation, and documentation of data protection projects.
• Develop automation scripts (PowerShell, Python) to support deployment and maintenance.
• Collaborate with team to expand domain knowledge and stay updated on DSPM tech.
• Stay current with data protection technologies and compliance requirements.

Skills

DLP expertise

InfoSec experience

Cloud security

Secure SDLC

Team collaboration

Compliance knowledge

Ownership/drive

HITRUST/NIST/ISO controls

Education

Bachelor's degree in Information Security/related field

Master's degree in Information Security/related field

Tools

Purview

ForcePoint

BigID

Varonis

GKE

PowerShell

Python

GitLab

Job description

Company :

enGen Job Description :

JOB SUMMARY

The Data Protection Engineer is a key member of the Data Protection team, responsible for the implementation, maintenance, and operational support of the organization's data protection infrastructure and applications. The Engineer will participate in complex projects, troubleshoot incidents, and contribute to the development and improvement of Data Protection engineering policies, standards, and procedures. They will work closely with senior engineers to implement and maintain data protection solutions. This role requires expertise in Microsoft Purview, ForcePoint, BigID, Varonis, Windows, Linux, GKE, Encryption, and other data loss prevention (DLP) and data security posture management (DSPM) tools.

ESSENTIAL RESPONSIBILITIES

• Implement and maintain components of the organization's data protection infrastructure across various platforms and vendors, ensuring optimal performance and security. This includes deploying and configuring DLP, DSPM, and data de-identification solutions.
• Collaborate on the design and implementation of data protection solutions, following established best practices and aligning with business requirements. This includes working within on-premises and cloud-based environments (GCP, AWS, Azure).
• Configure and maintain data protection policies across relevant platforms, including configuring sensitive information types, tuning detection parameters, managing exception lists, and etc
• Troubleshoot and resolve data protection incidents, conducting root cause analysis and escalating complex issues as needed for effective remediation.
• Contribute to data protection projects, assisting with tasks such as testing, implementation, and documentation, and participate in project meetings to provide updates.
• Develop and maintain automation scripts (e.g., PowerShell, Python) to improve efficiency and support the deployment and maintenance of data protection software, following established coding standards and best practices.
• Actively collaborate with team members to expand technical knowledge and expertise in data protection technologies.
• Stay current with relevant data protection technologies, industry best practices, and evolving compliance requirements.
• Other duties as assigned or requested.

EXPERIENCE

Required

• 5 years of experience with Data Loss Prevention
• 5 years of experience with Information Security and Systems Analysis
• 5 years of experience with deploying and maintaining infrastructure for DLP software's
• 5 years of experience with creating and managing DLP policies

Preferred

• 3 years of experience with at least two modern programming languages (Python, Java, JavaScript, BASH, PowerShell etc.)
• 3 years of experience with designing and providing architectural support to at least two of the following cloud service providers: Google Cloud Platform, Amazon Web Services or Azure

SKILLS

• Demonstrates ability to achieve stretch goals in a highly innovative and fast-paced environment.
• Ability to communicate and present to other technology groups and leaders
• Strong teamwork and inter-personal skills
• Familiarity with secure SDLC best practices
• Strong sense of ownership, urgency, and drive
• Knowledge of HITRUST CSF, NIST 800-83 cyber security framework, PCI, HIPAA, HITECH, COBIT, ISO 27001/2, and ITIL 3
• Kubernetes or other Container orchestration technologies
• Gitlab or other versioning control tools and processes.
• Kubernetes or other Container orchestration technologies

EDUCATION

Required

• Bachelor's degree in Information Security, Information Systems, Information Assurance, Computer Science or related field

Substitutions

• 5 years of Information Security, Governance, Risk and/or Compliance, Information Technology or Business Analysis with at least 3 years of experience with hands-on Engineering principles

Preferred

• Master's degree in Information Security, Information Systems, Information Assurance, Computer Science or related field

LICENSES or CERTIFICATIONS

Required

• None

Preferred

• CISSP
• Advanced certification in any of these cloud providers - GCP, AWS or Azure (E.g. Professional Cloud Architect/Security Engineer)
• Terraform or similar certification

Language:

• None

Travel Required:

Less than 25%

PHYSICAL, MENTAL DEMANDS and WORKING CONDITIONS

Position Type

• Office-Based or Remote Position

Physical work site required

• Occasionally

Disclaimer: The job description has been designed to indicate the general nature and essential duties and responsibilities of work performed by employees within this job title. It may not contain a comprehensive inventory of all duties, responsibilities, and qualifications required of employees to do this job.

Compliance Requirement : This job adheres to the ethical and legal standards and behavioral expectations as set forth in the code of business conduct and company policies.

As a component of job responsibilities, employees may have access to covered information, cardholder data, or other confidential