Senior Data Security Engineer - DoD Zero Trust & DRM

Barbaricum; Tampa (FL); On-site; USD 150,000 - 190,000; Full time

Job summary

Barbaricum is seeking a Senior Data Security Engineer to lead data-centric security programs within the USSOCOM EDAT Zero Trust team. You will design, implement, and sustain DRM and data protection across on-premises and cloud environments, collaborating with cybersecurity architects and ICAM engineers.

Responsibilities include configuring encryption, labeling, and access controls, integrating Microsoft Purview technologies, and developing data classification schemas.

Qualifications

• Active Top Secret/SCI security clearance.
• Must be eligible to maintain access to USSOCOM systems and facilities.
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, Engineering, or a related technical field (or equivalent experience).
• Minimum of 10 years of progressively responsible cybersecurity or information security engineering experience.
• Experience implementing enterprise Data Rights Management (DRM), Information Rights Management (IRM), or Enterprise Digital Rights Management (EDRM) technologies.

Responsibilities

• Design, implement, and sustain enterprise Data Rights Management (DRM) solutions supporting the DoD Zero Trust Data Pillar.
• Engineer data-centric security controls that protect sensitive information regardless of location, device, or user.
• Configure and manage encryption, labeling, classification, access control, and persistent protection technologies for enterprise data.
• Implement Microsoft Purview Information Protection, Microsoft Purview Data Loss Prevention (DLP), Microsoft Purview Information Governance, Microsoft Purview Insider Risk Management, Microsoft Defender for Cloud Apps, and related Microsoft 365 security technologies.
• Develop and maintain enterprise data classification schemas, sensitivity labels, protection templates, and automated labeling policies.
• Integrate DRM capabilities with Identity, Credential, and Access Management (ICAM) solutions to enforce attribute-based and role-based access controls.
• Collaborate with Zero Trust architects to implement policy decision points (PDPs), policy enforcement points (PEPs), and continuous authorization mechanisms supporting secure data access.
• Develop data protection strategies supporting cloud, hybrid, and on-premises environments.
• Implement and maintain data loss prevention (DLP) policies for email, endpoints, cloud applications, collaboration platforms, and removable media.
• Support secure collaboration using Microsoft 365, SharePoint Online, Teams, Exchange Online, OneDrive, and Azure services.
• Evaluate enterprise data flows and recommend security controls that reduce organizational risk while supporting operational requirements.
• Perform security assessments, gap analyses, and technical evaluations of DRM and data protection technologies.
• Develop engineering documentation including system design documents, implementation plans, SOPs, technical reports, and architecture diagrams.
• Support Authority to Operate (ATO), RMF, and cybersecurity compliance activities.
• Participate in architecture reviews, security engineering working groups, technical interchange meetings, and Zero Trust planning sessions.
• Mentor junior engineers and provide technical leadership across the Data Team.

Education

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, Engineering, or a related technical field

Job description

Barbaricum is seeking a Senior Data Security Engineer to lead data-centric security programs within the USSOCOM EDAT Zero Trust team. You will design, implement, and sustain DRM and data protection across on-premises and cloud environments, collaborating with cybersecurity architects and ICAM engineers.

Responsibilities include configuring encryption, labeling, and access controls, integrating Microsoft Purview technologies, and developing data classification schemas.