Senior Data Security Engineer: DoD Zero Trust & DRM

Barbaricum; Fort Bragg (NC); On-site; USD 140,000 - 190,000; Full time

Job summary

Barbaricum is seeking a Senior Data Security Engineer to lead data protection efforts for the USSOCOM Enterprise Development, Application, and Training (EDAT) Zero Trust Data Team. You will design and implement DRM and data-centric security controls protecting CUI across on-premises and cloud environments.

The role emphasizes collaboration with cybersecurity architects, ICAM, cloud engineers, and mission partners to enforce least privilege, continuous verification, and policy-based access, while

Qualifications

• Active Top Secret/SCI security clearance.
• Must be eligible to maintain access to USSOCOM systems and facilities.
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, Engineering, or a related technical field (or equivalent experience).
• Minimum of 10 years of progressively responsible cybersecurity or information security engineering experience.
• Experience implementing enterprise Data Rights Management (DRM), Information Rights Management (IRM), or Enterprise Digital Rights Management (EDRM) technologies.
• Strong understanding of DoD Zero Trust principles, architecture, and implementation guidance.
• Experience securing data across Microsoft 365, Azure, hybrid cloud, and enterprise environments.
• Experience implementing Microsoft Purview Information Protection, DLP, sensitivity labeling, and information governance capabilities.
• Experience with data classification, encryption, key management, and data lifecycle management.
• Experience integrating security solutions with Microsoft Entra ID (Azure AD), Conditional Access, Privileged Identity Management (PIM), and ICAM architectures.
• Knowledge of NIST SP 800-53, NIST SP 800-207 (Zero Trust Architecture), DoD Zero Trust Reference Architecture, RMF, and CMMC concepts.
• Strong knowledge of encryption technologies, PKI, certificate management, and secure information sharing.
• Experience troubleshooting complex enterprise security implementations.
• Excellent written and verbal communication skills.

Responsibilities

• Design, implement, and sustain enterprise DRM solutions supporting the DoD Zero Trust Data Pillar.
• Engineer data-centric security controls that protect sensitive information regardless of location, device, or user.
• Configure and manage encryption, labeling, classification, access control, and persistent protection technologies for enterprise data.
• Implement Microsoft Purview Information Protection, Microsoft Purview DLP, Microsoft Purview Information Governance, Microsoft Purview Insider Risk Management, Microsoft Defender for Cloud Apps, and related Microsoft 365 security technologies.
• Develop and maintain enterprise data classification schemas, sensitivity labels, protection templates, and automated labeling policies.
• Integrate DRM capabilities with ICAM solutions to enforce attribute-based and role-based access controls.
• Collaborate with Zero Trust architects to implement PDPs, PEPs, and continuous authorization mechanisms for secure data access.
• Develop data protection strategies for cloud, hybrid, and on-premises environments.
• Implement and maintain Data Loss Prevention (DLP) policies for email, endpoints, cloud apps, collaboration platforms, and removable media.
• Support secure collaboration using Microsoft 365, SharePoint Online, Teams, Exchange Online, OneDrive, and Azure services.
• Evaluate enterprise data flows and recommend security controls that reduce risk while supporting operations.
• Perform security assessments, gap analyses, and evaluations of DRM and data protection technologies.
• Develop engineering documentation including system design documents, implementation plans, SOPs, reports, and architecture diagrams.
• Support Authority to Operate (ATO), RMF, and cybersecurity compliance activities.
• Participate in architecture reviews, security engineering groups, and Zero Trust planning sessions.
• Mentor junior engineers and provide technical leadership across the Data Team.

Job description

Barbaricum is seeking a Senior Data Security Engineer to lead data protection efforts for the USSOCOM Enterprise Development, Application, and Training (EDAT) Zero Trust Data Team. You will design and implement DRM and data-centric security controls protecting CUI across on-premises and cloud environments.

The role emphasizes collaboration with cybersecurity architects, ICAM, cloud engineers, and mission partners to enforce least privilege, continuous verification, and policy-based access, while