Enterprise Data Security Engineer (IAM & Data Protection)

Jobtailor; Brooklyn (OH); On-site; USD 90,000 - 150,000; Full time

Job summary

Jobtailor is seeking a Security Engineer to design, implement, and maintain enterprise data security controls across databases, cloud platforms, and applications. You will integrate security tooling with IAM, PAM, SIEM, and DLP, while advancing data protection strategies including encryption, tokenization, masking, and access control.

The role requires 3+ years in cybersecurity, familiarity with diverse databases, and scripting for automation.

Qualifications

• 3+ years of experience in cybersecurity, security engineering, infrastructure security, database security, or a related technical discipline
• Experience administering or engineering enterprise security technologies
• Working knowledge of Oracle, Microsoft SQL Server, PostgreSQL, MySQL, or similar database platforms
• Understanding of encryption, tokenization, masking, access control, data classification, and database activity monitoring
• Knowledge of IAM, RBAC, ABAC, SSO, service accounts, and privileged access
• Experience troubleshooting complex enterprise technology integrations
• Familiarity with Linux and/or Windows operating environments
• Scripting or automation experience using Python, PowerShell, Bash, REST APIs, or similar tools
• Understanding of TCP/IP, TLS, proxies, firewalls, DNS, and secure communications
• Experience securing AWS, Microsoft Azure, or Google Cloud
• Familiarity with Kubernetes, containers, APIs, microservices, and modern application architectures
• Strong analytical, troubleshooting, documentation, and communication skills

Responsibilities

• Engineer, configure, administer, and maintain enterprise data security platforms
• Implement and maintain data access control, dynamic masking, encryption, tokenization, filtering, and other data protection mechanisms
• Support security controls across databases, data warehouses, cloud data platforms, APIs, applications, and analytics environments
• Integrate data security technologies with IAM, PAM, SIEM, SOAR, DLP, and security monitoring platforms
• Develop and maintain least-privilege and role- or attribute-based access policies
• Discover and classify sensitive data, including PII, financial information, credentials, intellectual property, and regulated information
• Monitor data access activity and investigate anomalous, unauthorized, or high-risk access patterns
• Troubleshoot platform, policy, integration, connectivity, and performance issues
• Assess database, application, cloud, and data-platform changes for security impacts
• Partner with application and database teams to integrate security controls into solutions
• Support security requirements for AI applications, copilots, and autonomous agents accessing enterprise data
• Develop automation and scripts for deployment, monitoring, policy management, reporting, and operational efficiency
• Participate in vulnerability management, incident response, security investigations, and remediation
• Maintain security architecture diagrams, configuration standards, runbooks, and technical documentation
• Support internal and external audits with evidence of data security controls
• Evaluate data security technologies and recommend improvements to the data protection architecture

Skills

Enterprise Data Security Management

Data Protection Mechanisms Implement

IAM Integration

Database Security Administration

Scripting and Automation

Education

Bachelor's Degree in Cybersecurity

Bachelor's Degree in Computer Science

Bachelor's Degree in Information Technology

Bachelor's Degree in Engineering

Tools

SecuPi

IAM

PAM

SIEM

SOAR

DLP

AWS

Microsoft Azure

Google Cloud

Kubernetes

Job description

Jobtailor is seeking a Security Engineer to design, implement, and maintain enterprise data security controls across databases, cloud platforms, and applications. You will integrate security tooling with IAM, PAM, SIEM, and DLP, while advancing data protection strategies including encryption, tokenization, masking, and access control.

The role requires 3+ years in cybersecurity, familiarity with diverse databases, and scripting for automation.