Data Protection Engineer - Discovery, Access & Compliance

I.T. Solutions, Inc.; United States; On-site; USD 160,000 - 220,000; Full time

Job summary

I.T. Solutions, Inc. is seeking a Sr. Data Security Engineer in the United States to mature data protection across cloud environments, databases, and SaaS platforms. You will design, deploy, and tune DLP, DSPM, CASB, and encryption strategies, while aligning with RBAC/ABAC and least-privilege principles.

The role emphasizes hands-on engineering, data discovery, and integration with SOC workflows to automate response and reduce data exfiltration risk. Strong scripting skills are required.

Qualifications

• 5+ years in data security, cloud, platform security, or security engineering.
• Hands-on implementing or operating capabilities such as DLP, DSPM, CASB, data discovery, or sensitive data classification.
• Strong understanding of data protection across cloud storage, databases, SaaS platforms, collaboration tools, endpoints, and analytics environments.
• Experience securing AWS data services and multi-account environments, including storage permissions, encryption, logging, identity, and public exposure controls.
• Strong understanding of IAM, least privilege, privileged access, service identities, and access-control models such as RBAC and ABAC.
• Experience integrating security telemetry with SIEM, XDR, SOAR, or incident response workflows.
• Ability to write automation or production-quality scripts in Python, PowerShell, Go, or a similar language.

Responsibilities

• Build and operationalize data discovery and classification across structured and unstructured data sources.
• Identify sensitive data such as PII, financial information, payment card data, intellectual property, credentials, and other business-critical information.
• Develop data-flow inventories and mappings that show where sensitive data originates, how it moves, where it is stored, and who can access it.
• Design, implement, and tune controls across DLP, DSPM, CASB, database activity monitoring, encryption, tokenization, data masking, and key management capabilities.
• Secure data stored in AWS, databases, data lakes, warehouses, SaaS applications, collaboration platforms, endpoints, and non-production environments.
• Develop data protection policies that account for classification, user context, business process, destination, access patterns, and exfiltration risk rather than relying only on broad blocking rules.
• Partner with Identity, Platform, Data, and Architecture teams on RBAC, ABAC, least privilege, privileged access, service identities, and time-bound access patterns.
• Integrate data security telemetry with SIEM, XDR, and Security Operations workflows to detect anomalous access, insider risk, data misuse, and potential exfiltration.
• Build automation for investigation, enrichment, containment, remediation, ticketing, evidence collection, and control validation.
• Support incident response involving sensitive data, including scoping affected information, preserving evidence, determining exposure paths, and improving controls after an event.
• Define meaningful program metrics, including data coverage, classification accuracy, control coverage, policy effectiveness, false-positive rates, access exposure, and remediation progress.
• Make technical decisions visible through design documents, runbooks, reference implementations, and repeatable patterns that other teams can adopt.

Skills

Data security

Cloud security

Platform security

Security engineering

DLP

DSPM

CASB

SIEM integration

Automation scripting

Python/PowerShell/Go

Tools

Microsoft Purview

Prisma Access

SIEM

XDR

SOAR

Job description

I.T. Solutions, Inc. is seeking a Sr. Data Security Engineer in the United States to mature data protection across cloud environments, databases, and SaaS platforms. You will design, deploy, and tune DLP, DSPM, CASB, and encryption strategies, while aligning with RBAC/ABAC and least-privilege principles.

The role emphasizes hands-on engineering, data discovery, and integration with SOC workflows to automate response and reduce data exfiltration risk. Strong scripting skills are required.