Identity & Data Security Engineer — Cloud & DSPM Expert

HeartCentrix Solutions

Town of Texas (WI)

On-site

USD 95,000 - 135,000

Full time

5 days ago

Be an early applicant

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

HeartCentrix Solutions is seeking an experienced Data Protection & Identity Security Engineer to strengthen enterprise security across identity, data protection, and cloud environments. You will work with cybersecurity, privacy, infrastructure, and engineering teams to protect sensitive data, fortify identity security, and automate security controls across modern cloud platforms.

The role involves implementing DSPM solutions, designing data protection technologies, and embedding security

Qualifications

3–7 years of hands-on experience with enterprise identity and security technologies.
Experience administering and securing Active Directory environments.
Experience with Microsoft Entra ID (Azure AD).
Experience supporting Azure AD Connect and hybrid identity environments.
Strong understanding of AD security hardening and identity security best practices.
Experience identifying and mitigating identity-based attack paths.
Knowledge of authentication protocols including Kerberos, NTLM, SAML, and OAuth.
Familiarity with Tier 0 administration and identity as a security control plane.
Strong troubleshooting and problem-solving skills.
Excellent communication skills with both technical and non-technical stakeholders.

Responsibilities

Build and strengthen enterprise security across identity, data protection, and cloud environments.
Implement and support DSPM solutions to identify and reduce data security risks.
Design and support encryption, tokenization, masking, and other data protection tech.
Configure and manage RBAC and ABAC, promoting least-privilege access.
Deploy and maintain DLP and DAM solutions.
Improve detection for data exposure, insider threats, and unauthorized access.
Integrate security telemetry with SIEM/SOAR to automate threat detection and response.
Support data retention, lifecycle management, and secure disposal processes.
Automate DSARs and privacy workflows.
Embed security/privacy controls into CI/CD and development processes.
Assist with GDPR, CCPA/CPRA, HIPAA, PCI DSS compliance and audits.
Investigate incidents and implement long-term improvements.
Perform hardening, vulnerability remediation, and configuration reviews.
Participate in tabletop exercises and security assessments.
Create documentation, runbooks, and technical guidance for secure data handling.
Collaborate with cyber, privacy, legal, infra, and engineering teams to improve security.