Director of Data Protection Engineering

Apex Systems; United States; On-site; USD 180,000 - 260,000; Full time

Job summary

Apex Systems seeks a Director of Data Protection Engineering to provide technical leadership across enterprise-wide data protection capabilities, including architecture, engineering, and integration of controls for endpoints, email, cloud, SaaS, applications, APIs, and AI environments.

The role requires leading players to drive standardized policies, mentor teams, and collaborate with EA, cybersecurity, and platform teams to embed data protection across modern technology solutions.

Qualifications

• Bachelor's degree in a relevant field or equivalent practical experience.
• Significant experience in security engineering, platform engineering, software engineering, or security architecture in regulated industries.
• Deep expertise in Microsoft Purview and DLP policy configuration.

Responsibilities

• Define and evolve target-state data protection architecture.
• Lead engineering and automation of data classification, labeling, DLP, and DSPM.
• Set consistent DLP design standards and policy-based enforcements.
• Collaborate with enterprise architecture, cybersecurity, and platform teams.
• Mentor and manage internal security engineers.
• Document configuration changes and architectural decisions.

Skills

Data protection

Security engineering

Platform engineering

Software engineering

Security architecture

Education

Bachelor's degree

Tools

Microsoft Purview

DLP policy configuration

DSPM

Job description

The client is seeking a Director of Data Protection Engineering to provide technical leadership in the development and implementation of enterprise-wide data protection capabilities. This role is responsible for steering the architecture, engineering, and integration of technical controls to secure sensitive data across various platforms, including endpoints, email, cloud, SaaS, applications, APIs, and emerging artificial intelligence environments. The position requires a leader who can operate as a player-coach, combining deep security engineering expertise with hands-on technical skills to manage engineering teams and design standardized policies for data protection across all egress channels.

Key responsibilities include defining and evolving the target-state architecture for data protection, leading the engineering and automation of core capabilities such as data classification, labeling, Data Loss Prevention (DLP), and Data Security Posture Management (DSPM). The Director will set consistent DLP design standards, engineer policy-based enforcements, and collaborate with enterprise architecture, cybersecurity, and platform teams to embed data protection controls into modern technology solutions. Additional duties involve managing and mentoring internal security engineers, documenting configuration changes and architectural decisions, and evaluating security technologies and vendors for scalability and effectiveness.

The ideal candidate will have a bachelor's degree in a relevant field or equivalent practical experience, along with significant experience in security engineering, platform engineering, software engineering, or security architecture within highly regulated industries. Deep expertise in Microsoft Purview, DLP policy configuration, and modern engineering practices is required. Preferred qualifications include experience with data masking, tokenization, secure browser controls, and relevant security certifications. The Director will support the development of internal data protection capabilities and may work alongside external advisory or consulting partners.