Senior Data Protection Engineer – Federal Cloud Security

Boston Consulting Group (BCG); Boston (MA); On-site; USD 154,000 - 188,000; Full time

Benefits offered by this job

Zero-dollar health premiums

Dental coverage

Vision insurance

Parental leave

Generous retirement contributions

13 holidays + 15 vacation days

Gym reimbursement

Job summary

Boston Consulting Group is seeking a Data Protection Engineer for its Federal Organization to operate and maintain Data Protection architectures across GCC High platforms (AWS, Azure, M365) in line with NIST 800-171, DFARS 7012, and CMMC Level 2. You will collaborate with cross-functional teams to implement secure data strategies and governance across cloud environments.

The role requires 5–8+ years in information security and 3–5+ years in data protection operations, with strong analytics,

Qualifications

• 5-8+ years of experience in Information Security and Data Protection
• 3-5+ years of Data Protection operational capabilities
• Experience with data handling within AI tooling
• Proficiency in data classification and tracking strategies
• Familiarity with standards (FedRAMP, NIST 800-171, CMMC)

Responsibilities

• Enhance and maintain data classification & labeling strategy across multiple platforms
• Translate compliance obligations into an operational data schema
• Lead process improvements with Engineering and IT Service teams
• Define restrictive labeling strategies with Risk and Security teams
• Refine Data Protection processes to meet security needs
• Present data analysis and recommendations to senior stakeholders
• Lead data-driven egress monitoring & controls evolutions
• Architect new data controls within emerging AI architecture
• Evolve security tools & reporting with embedded AI security tools
• Collaborate with vendor technical teams to enable progress
• Automate containment, isolation and drive better user behaviors
• Perform technical research on new challenges

Job description

Boston Consulting Group is seeking a Data Protection Engineer for its Federal Organization to operate and maintain Data Protection architectures across GCC High platforms (AWS, Azure, M365) in line with NIST 800-171, DFARS 7012, and CMMC Level 2. You will collaborate with cross-functional teams to implement secure data strategies and governance across cloud environments.

The role requires 5–8+ years in information security and 3–5+ years in data protection operations, with strong analytics,