EDAT- Senior Data Security Engineer - Fort Bragg, NC

Barbaricum; Fort Bragg (NC); On-site; USD 140,000 - 190,000; Full time

Job summary

Barbaricum is seeking a Senior Data Security Engineer to lead data protection efforts for the USSOCOM Enterprise Development, Application, and Training (EDAT) Zero Trust Data Team. You will design and implement DRM and data-centric security controls protecting CUI across on-premises and cloud environments.

The role emphasizes collaboration with cybersecurity architects, ICAM, cloud engineers, and mission partners to enforce least privilege, continuous verification, and policy-based access, while

Qualifications

• Active Top Secret/SCI security clearance.
• Must be eligible to maintain access to USSOCOM systems and facilities.
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, Engineering, or a related technical field (or equivalent experience).
• Minimum of 10 years of progressively responsible cybersecurity or information security engineering experience.
• Experience implementing enterprise Data Rights Management (DRM), Information Rights Management (IRM), or Enterprise Digital Rights Management (EDRM) technologies.
• Strong understanding of DoD Zero Trust principles, architecture, and implementation guidance.
• Experience securing data across Microsoft 365, Azure, hybrid cloud, and enterprise environments.
• Experience implementing Microsoft Purview Information Protection, DLP, sensitivity labeling, and information governance capabilities.
• Experience with data classification, encryption, key management, and data lifecycle management.
• Experience integrating security solutions with Microsoft Entra ID (Azure AD), Conditional Access, Privileged Identity Management (PIM), and ICAM architectures.
• Knowledge of NIST SP 800-53, NIST SP 800-207 (Zero Trust Architecture), DoD Zero Trust Reference Architecture, RMF, and CMMC concepts.
• Strong knowledge of encryption technologies, PKI, certificate management, and secure information sharing.
• Experience troubleshooting complex enterprise security implementations.
• Excellent written and verbal communication skills.

Responsibilities

• Design, implement, and sustain enterprise DRM solutions supporting the DoD Zero Trust Data Pillar.
• Engineer data-centric security controls that protect sensitive information regardless of location, device, or user.
• Configure and manage encryption, labeling, classification, access control, and persistent protection technologies for enterprise data.
• Implement Microsoft Purview Information Protection, Microsoft Purview DLP, Microsoft Purview Information Governance, Microsoft Purview Insider Risk Management, Microsoft Defender for Cloud Apps, and related Microsoft 365 security technologies.
• Develop and maintain enterprise data classification schemas, sensitivity labels, protection templates, and automated labeling policies.
• Integrate DRM capabilities with ICAM solutions to enforce attribute-based and role-based access controls.
• Collaborate with Zero Trust architects to implement PDPs, PEPs, and continuous authorization mechanisms for secure data access.
• Develop data protection strategies for cloud, hybrid, and on-premises environments.
• Implement and maintain Data Loss Prevention (DLP) policies for email, endpoints, cloud apps, collaboration platforms, and removable media.
• Support secure collaboration using Microsoft 365, SharePoint Online, Teams, Exchange Online, OneDrive, and Azure services.
• Evaluate enterprise data flows and recommend security controls that reduce risk while supporting operations.
• Perform security assessments, gap analyses, and evaluations of DRM and data protection technologies.
• Develop engineering documentation including system design documents, implementation plans, SOPs, reports, and architecture diagrams.
• Support Authority to Operate (ATO), RMF, and cybersecurity compliance activities.
• Participate in architecture reviews, security engineering groups, and Zero Trust planning sessions.
• Mentor junior engineers and provide technical leadership across the Data Team.

Job description

EDAT- Senior Data Security Engineer - Tampa FL | Fort Bragg, NC

Barbaricum is a rapidly growing government contractor providing leading-edge support to federal customers, with a particular focus on Defense and National Security mission sets. We leverage more than 17 years of support to stakeholders across the federal government, with established and growing capabilities across Intelligence, Analytics, Engineering, Mission Support, and Communications disciplines. Founded in 2008, our mission is to transform the way our customers approach constantly changing and complex problem sets by bringing to bear the latest in technology and the highest caliber of talent.

Headquartered in Washington, DC's historic Dupont Circle neighborhood, Barbaricum also has a corporate presence in Tampa, FL, Bedford, IN, and Dayton, OH, with team members across the United States and around the world. As a leader in our space, we partner with firms in the private sector, academic institutions, and industry associations with a goal of continually building our expertise and capabilities for the benefit of our employees and the customers we support. Through all of this, we have built a vibrant corporate culture diverse in expertise and perspectives with a focus on collaboration and innovation. Our teams are at the frontier of the Nation's most complex and rewarding challenges. Join our team.

Barbaricum is currently seeking a Senior Data Security Engineer to serve as a technical leader supporting the USSOCOM Enterprise Development, Application, and Training (EDAT) Zero Trust Data Team. This position is responsible for designing, implementing, and maintaining enterprise Data Rights Management (DRM) and data-centric security capabilities that protect sensitive information throughout its lifecycle in accordance with the Department of Defense (DoD) Zero Trust Strategy.

The Senior Data Security Engineer works closely with cybersecurity architects, ICAM engineers, cloud engineers, system owners, and mission partners to implement data protection controls that enforce least privilege, continuous verification, and policy-based access to Controlled Unclassified Information (CUI) and other sensitive data across on-premises and cloud environments.

Key Responsibilities

• Design, implement, and sustain enterprise Data Rights Management (DRM) solutions supporting the DoD Zero Trust Data Pillar.
• Engineer data-centric security controls that protect sensitive information regardless of location, device, or user.
• Configure and manage encryption, labeling, classification, access control, and persistent protection technologies for enterprise data.
• Implement Microsoft Purview Information Protection, Microsoft Purview Data Loss Prevention (DLP), Microsoft Purview Information Governance, Microsoft Purview Insider Risk Management, Microsoft Defender for Cloud Apps, and related Microsoft 365 security technologies.
• Develop and maintain enterprise data classification schemas, sensitivity labels, protection templates, and automated labeling policies.
• Integrate DRM capabilities with Identity, Credential, and Access Management (ICAM) solutions to enforce attribute-based and role-based access controls.
• Collaborate with Zero Trust architects to implement policy decision points (PDPs), policy enforcement points (PEPs), and continuous authorization mechanisms supporting secure data access.
• Develop data protection strategies supporting cloud, hybrid, and on-premises environments.
• Implement and maintain data loss prevention (DLP) policies for email, endpoints, cloud applications, collaboration platforms, and removable media.
• Support secure collaboration using Microsoft 365, SharePoint Online, Teams, Exchange Online, OneDrive, and Azure services.
• Evaluate enterprise data flows and recommend security controls that reduce organizational risk while supporting operational requirements.
• Perform security assessments, gap analyses, and technical evaluations of DRM and data protection technologies.
• Develop engineering documentation including system design documents, implementation plans, standard operating procedures (SOPs), technical reports, and architecture diagrams.
• Support Authority to Operate (ATO), RMF, and cybersecurity compliance activities.
• Participate in architecture reviews, security engineering working groups, technical interchange meetings, and Zero Trust planning sessions.
• Mentor junior engineers and provide technical leadership across the Data Team.

Required Qualifications

• Active Top Secret/SCI security clearance.
• Must be eligible to maintain access to USSOCOM systems and facilities.
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, Engineering, or a related technical field (or equivalent experience).
• Minimum of 10 years of progressively responsible cybersecurity or information security engineering experience.
• Experience implementing enterprise Data Rights Management (DRM), Information Rights Management (IRM), or Enterprise Digital Rights Management (EDRM) technologies.
• Strong understanding of DoD Zero Trust principles, architecture, and implementation guidance.
• Experience securing data across Microsoft 365, Azure, hybrid cloud, and enterprise environments.
• Experience implementing Microsoft Purview Information Protection, DLP, sensitivity labeling, and information governance capabilities.
• Experience with data classification, encryption, key management, and data lifecycle management.
• Experience integrating security solutions with Microsoft Entra ID (Azure AD), Conditional Access, Privileged Identity Management (PIM), and ICAM architectures.
• Knowledge of NIST SP 800-53, NIST SP 800-207 (Zero Trust Architecture), DoD Zero Trust Reference Architecture, RMF, and CMMC concepts.
• Strong knowledge of encryption technologies, PKI, certificate management, and secure information sharing.
• Experience troubleshooting complex enterprise security implementations.
• Excellent written and verbal communication skills.

Desired Qualifications

• Experience supporting USSOCOM or other DoD organizations.
• Experience implementing Microsoft Defender XDR security solutions.
• Experience with Microsoft Defender for Endpoint, Defender for Office 365, Defender for Identity, and Defender for Cloud Apps.
• Familiarity with cloud security technologies including Microsoft Azure, AWS, or Google Cloud Platform.
• Experience with Microsoft Graph API, PowerShell automation, and infrastructure-as-code.
• Experience integrating DRM with enterprise collaboration platforms.
• Knowledge of data discovery, insider risk, data governance, and privacy solutions.
• Experience supporting Agile software development and DevSecOps environments.

Certifications

Candidate must possess an active DoD 8140 baseline certification appropriate for the position (such as Security+ CE, CySA+, CASP+, CISSP, or equivalent) prior to start date.

Preferred certifications include:

• Certified Information Systems Security Professional (CISSP)
• Microsoft Certified: Information Protection Administrator Associate (SC-400)
• Microsoft Certified: Cybersecurity Architect Expert (SC-100)
• Microsoft Certified: Security Operations Analyst (SC-200)
• Microsoft Certified: Identity and Access Administrator Associate (SC-300)
• Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900)
• Certified Information Security Manager (CISM)
• GIAC Security Certifications (GSEC, GCIA, GCED, or similar)

EEO Commitment

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law.

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

As set forth in Barbaricum’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.