Data Protection Engineer - DLP/DSPM Specialist (Remote)

Highmark Health; Minnesota; On-site; USD 114,000 - 140,000; Full time

Job summary

Highmark Health is seeking a Data Protection Engineer to implement, maintain, and support DLP/DSPM solutions across on‑prem and cloud environments. The role collaborates with senior engineers to enhance data protection policies, tuning detection parameters and managing sensitive information types.

The ideal candidate has substantial experience with DLP, information security, and cloud architecture across GCP/AWS/Azure, plus scripting skills in Python or PowerShell.

Qualifications

• 5+ years in data loss prevention, information security, and risk analysis.
• Hands-on deployment and maintenance of DLP infrastructure across on‑prem and cloud.
• Experience designing and enforcing DLP policies and DSPM controls.
• Proficiency in scripting (Python/PowerShell) to automate tasks.
• Cloud architecture knowledge for GCP, AWS or Azure with security focus.

Responsibilities

• Implement and maintain data protection components across platforms, including DLP and DSPM.
• Design and implement data protection solutions aligned with business needs.
• Configure policies, fine-tune detections, manage exceptions, and monitor alerts.
• Troubleshoot incidents, perform root cause analysis, and remediation.
• Contribute to projects with testing, deployment, and documentation.

Skills

DLP expertise

InfoSec

Systems analysis

Python

PowerShell

GCP/AWS/Azure

Teamwork

Education

Bachelor's degree in Information Security or related field

Master's degree in Information Security or related field

Advanced cloud certifications (GCP/AWS/Azure)

Tools

Microsoft Purview

ForcePoint

BigID

Varonis

Windows

Linux

GKE

Encryption

Job description

Highmark Health is seeking a Data Protection Engineer to implement, maintain, and support DLP/DSPM solutions across on‑prem and cloud environments. The role collaborates with senior engineers to enhance data protection policies, tuning detection parameters and managing sensitive information types.

The ideal candidate has substantial experience with DLP, information security, and cloud architecture across GCP/AWS/Azure, plus scripting skills in Python or PowerShell.