Remote Data Protection Architect | DLP/DSPM Expert

Highmark Health; New York (NY); Hybrid; USD 114,000 - 140,000; Full time

Job summary

Highmark Health is seeking a Data Protection Engineer to implement and maintain advanced data protection infrastructure across on-premises and cloud environments, including DLP, DSPM, and de-identification solutions. The role requires collaboration with senior engineers, incident troubleshooting, and policy development.

Expertise in Purview, ForcePoint, BigID, and Varonis is essential, with strong scripting in PowerShell/Python.

Qualifications

• 5 years of experience with Data Loss Prevention.
• 5 years of experience with Information Security and Systems Analysis.
• 5 years of experience with deploying and maintaining infrastructure for DLP software
• 5 years of experience with creating and managing DLP policies
• 3+ years of experience with at least two modern programming languages (Python, Java, JavaScript, BASH, PowerShell)
• 3 years of experience with designing and providing architectural support to at least two cloud providers (GCP, AWS or Azure)

Responsibilities

• Implement and maintain DLP/DSPM components across platforms.
• Troubleshoot incidents and perform root cause analysis.
• Collaborate on design and deployment of data protection solutions for on-prem and cloud.
• Develop automation using PowerShell/Python to improve deployment and maintenance.

Skills

DLP experience

InfoSec & Systems Analysis

DLP infra deployment

DLP policies management

Programming languages

Cloud architectures (GCP/AWS/Azure)

Teamwork

Security frameworks (HIPAA/NIST/etc)

Education

Bachelor's degree in Information Security/Information Assurance/CS

Master's degree in Information Security/Information Systems/CS

Tools

Microsoft Purview

ForcePoint

BigID

Varonis

Windows

Linux

GKE

Encryption

Job description

Highmark Health is seeking a Data Protection Engineer to implement and maintain advanced data protection infrastructure across on-premises and cloud environments, including DLP, DSPM, and de-identification solutions. The role requires collaboration with senior engineers, incident troubleshooting, and policy development.

Expertise in Purview, ForcePoint, BigID, and Varonis is essential, with strong scripting in PowerShell/Python.