EDAT- Senior Data Security Engineer (Data Rights Management – DRM)- Tampa, FL

Barbaricum; Tampa (FL); On-site; USD 140,000 - 170,000; Full time

Job summary

Barbaricum is seeking a Senior Data Security Engineer (Data Rights Management) in Tampa, FL to lead enterprise DRM implementations for USSOCOM EDAT. You will design, deploy, and maintain data-centric security controls across on‑prem and cloud environments, coordinating with ICAM and Zero Trust teams to enforce least privilege and policy-based access to sensitive information.

The role requires a TS/SCI clearance, DoD security experience, and strong collaboration with cybersecurity architects.

Qualifications

• Active Top Secret/SCI security clearance.
• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Information Systems, Engineering, or a related field (or equivalent).
• Minimum of 10 years of progressively responsible cybersecurity or information security engineering experience.
• Experience implementing DRM/IRM/EDRM technologies.
• Strong understanding of DoD Zero Trust principles, architecture, and implementation guidance.
• Experience securing data across Microsoft 365, Azure, hybrid cloud, and enterprise environments.
• Experience implementing Microsoft Purview Information Protection, DLP, sensitivity labeling, and information governance capabilities.
• Experience with data classification, encryption, key management, and data lifecycle management.
• Experience integrating security solutions with Microsoft Entra ID, Conditional Access, PIM, and ICAM architectures.

Responsibilities

• Design, implement, and sustain enterprise DRM solutions for the DoD Zero Trust framework.
• Engineer data-centric security controls protecting sensitive information across locations and devices.
• Configure encryption, labeling, classification, access control, and persistent protection.
• Implement and manage Microsoft Purview suite and related security technologies.
• Develop data classification schemas, labeling policies, and governance capabilities.
• Integrate DRM with ICAM solutions for policy-based access control.
• Collaborate on PDPs, PEPs, and continuous authorization for secure data access.
• Shape data protection strategies across cloud, hybrid, and on‑prem environments.
• Develop technical docs, SOPs, and architecture diagrams.
• Support ATO, RMF, and cybersecurity compliance activities.
• Mentor junior engineers and lead data security initiatives.

Skills

Security clearance

Zero Trust

Communication

Leadership

Data security

Education

Bachelor’s degree in Cybersecurity/IT/CS/IS/Engineering

Tools

Microsoft Purview

Microsoft 365

Azure

PowerShell

Job description

EDAT- Senior Data Security Engineer (Data Rights Management – DRM)- Tampa, FL

Barbaricum is a rapidly growing government contractor providing leading-edge support to federal customers, with a particular focus on Defense and National Security mission sets. We leverage more than 17 years of support to stakeholders across the federal government, with established and growing capabilities across Intelligence, Analytics, Engineering, Mission Support, and Communications disciplines. Founded in 2008, our mission is to transform the way our customers approach constantly changing and complex problem sets by bringing to bear the latest in technology and the highest caliber of talent.

Headquartered in Washington, DC’s historic Dupont Circle neighborhood, Barbaricum also has a corporate presence in Tampa, FL, Bedford, IN, and Dayton, OH, with team members across the United States and around the world. As a leader in our space, we partner with firms in the private sector, academic institutions, and industry associations with a goal of continually building our expertise and capabilities for the benefit of our employees and the customers we support. Through all of this, we have built a vibrant corporate culture diverse in expertise and perspectives with a focus on collaboration and innovation. Our teams are at the frontier of the Nation’s most complex and rewarding challenges. Join our team.

Barbaricum is currently seeking a Senior Data Security Engineer (Data Rights Management) to serve as a technical leader supporting the USSOCOM Enterprise Development, Application, and Training (EDAT) Zero Trust Data Team. This position is responsible for designing, implementing, and maintaining enterprise Data Rights Management (DRM) and data-centric security capabilities that protect sensitive information throughout its lifecycle in accordance with the Department of Defense (DoD) Zero Trust Strategy.

The Senior Data Security Engineer works closely with cybersecurity architects, ICAM engineers, cloud engineers, system owners, and mission partners to implement data protection controls that enforce least privilege, continuous verification, and policy-based access to Controlled Unclassified Information (CUI) and other sensitive data across on-premises and cloud environments.

Key Responsibilities

• Design, implement, and sustain enterprise Data Rights Management (DRM) solutions supporting the DoD Zero Trust Data Pillar.
• Engineer data-centric security controls that protect sensitive information regardless of location, device, or user.
• Configure and manage encryption, labeling, classification, access control, and persistent protection technologies for enterprise data.
• Implement Microsoft Purview Information Protection, Microsoft Purview Data Loss Prevention (DLP), Microsoft Purview Information Governance, Microsoft Purview Insider Risk Management, Microsoft Defender for Cloud Apps, and related Microsoft 365 security technologies.
• Develop and maintain enterprise data classification schemas, sensitivity labels, protection templates, and automated labeling policies.
• Integrate DRM capabilities with Identity, Credential, and Access Management (ICAM) solutions to enforce attribute-based and role-based access controls.
• Collaborate with Zero Trust architects to implement policy decision points (PDPs), policy enforcement points (PEPs), and continuous authorization mechanisms supporting secure data access.
• Develop data protection strategies supporting cloud, hybrid, and on-premises environments.
• Implement and maintain data loss prevention (DLP) policies for email, endpoints, cloud applications, collaboration platforms, and removable media.
• Support secure collaboration using Microsoft 365, SharePoint Online, Teams, Exchange Online, OneDrive, and Azure services.
• Evaluate enterprise data flows and recommend security controls that reduce organizational risk while supporting operational requirements.
• Perform security assessments, gap analyses, and technical evaluations of DRM and data protection technologies.
• Develop engineering documentation including system design documents, implementation plans, standard operating procedures (SOPs), technical reports, and architecture diagrams.
• Support Authority to Operate (ATO), RMF, and cybersecurity compliance activities.
• Participate in architecture reviews, security engineering working groups, technical interchange meetings, and Zero Trust planning sessions.
• Mentor junior engineers and provide technical leadership across the Data Team.

Required Qualifications

• Active Top Secret/SCI security clearance.
• Must be eligible to maintain access to USSOCOM systems and facilities.
• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Information Systems, Engineering, or a related technical field (or equivalent experience).
• Minimum of 10 years of progressively responsible cybersecurity or information security engineering experience.
• Experience implementing enterprise Data Rights Management (DRM), Information Rights Management (IRM), or Enterprise Digital Rights Management (EDRM) technologies.
• Strong understanding of DoD Zero Trust principles, architecture, and implementation guidance.
• Experience securing data across Microsoft 365, Azure, hybrid cloud, and enterprise environments.
• Experience implementing Microsoft Purview Information Protection, DLP, sensitivity labeling, and information governance capabilities.
• Experience with data classification, encryption, key management, and data lifecycle management.
• Experience integrating security solutions with Microsoft Entra ID (Azure AD), Conditional Access, Privileged Identity Management (PIM), and ICAM architectures.
• Knowledge of NIST SP 800-53, NIST SP 800-207 (Zero Trust Architecture), DoD Zero Trust Reference Architecture, RMF, and CMMC concepts.
• Strong knowledge of encryption technologies, PKI, certificate management, and secure information sharing.
• Experience troubleshooting complex enterprise security implementations.
• Excellent written and verbal communication skills.

Desired Qualifications

• Experience supporting USSOCOM or other DoD organizations.
• Experience implementing Microsoft Defender XDR security solutions.
• Experience with Microsoft Defender for Endpoint, Defender for Office 365, Defender for Identity, and Defender for Cloud Apps.
• Familiarity with cloud security technologies including Microsoft Azure, AWS, or Google Cloud Platform.
• Experience with Microsoft Graph API, PowerShell automation, and infrastructure-as-code.
• Experience integrating DRM with enterprise collaboration platforms.
• Knowledge of data discovery, insider risk, data governance, and privacy solutions.
• Experience supporting Agile software development and DevSecOps environments.

Certifications

Candidate must possess an active DoD 8140 baseline certification appropriate for the position (such as Security+ CE, CySA+, CASP+, CISSP, or equivalent) prior to start date.

Preferred certifications include:

• Certified Information Systems Security Professional (CISSP)
• Microsoft Certified: Information Protection Administrator Associate (SC-400)
• Microsoft Certified: Cybersecurity Architect Expert (SC-100)
• Microsoft Certified: Security Operations Analyst (SC-200)
• Microsoft Certified: Identity and Access Administrator Associate (SC-300)
• Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900)
• Certified Information Security Manager (CISM)
• GIAC Security Certifications (GSEC, GCIA, GCED, or similar)

EEO Commitment

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law.