Senior DRM Engineer: Zero-Trust Data Security (TS/SCI)

Athenix Solutions Group; Tampa (FL); On-site; USD 140,000 - 200,000; Full time

Job summary

Athenix Special Missions is seeking a Senior Data Security Engineer (DRM Specialist) to lead encryption and DRM strategy for the USSOCOM Zero Trust program at MacDill AFB, Tampa, FL. The role focuses on granular, identity-aware protection and real-time policy decisions for data across SIPR/Top Secret and NIPR networks.

Candidates should have 10+ years in security engineering, with hands-on DRM design experience on Kiteworks, AIP/RMS, or Virtru, plus strong PKI/KMS knowledge.

Qualifications

• Senior-level, 10+ years of related technical experience.
• Extensive DRM/IRM experience with Kiteworks, AIP/RMS, or Virtru.
• Deep understanding of AES-256, RSA, PKI, and KMS operations.
• Ability to design ABAC logic and CA policies.
• Knowledge of CDS and air-gapped networks for key management.

Responsibilities

• Architect Kiteworks Private Content Network and Purview to serve as centralized PDP for file access.
• Translate metadata attributes into concrete DRM policies.
• Manage encryption key lifecycles ensuring FIPS 140-2/3 compliance across hybrid environments.
• Configure SafeVIEW and SafeEDIT to enable secure collaboration without data leaving controlled repos.
• Define and enforce Rights Management controls to prevent unauthorized Copy/Paste, screen capture, and printing.

Skills

DRM expert

ABAC policy design

Key management

Kiteworks

AES-256

PKI

Purge/IRMI

Education

MS in Cybersecurity

Tools

Kiteworks

Microsoft Purview

Azure Information Protection

Job description

Athenix Special Missions is seeking a Senior Data Security Engineer (DRM Specialist) to lead encryption and DRM strategy for the USSOCOM Zero Trust program at MacDill AFB, Tampa, FL. The role focuses on granular, identity-aware protection and real-time policy decisions for data across SIPR/Top Secret and NIPR networks.

Candidates should have 10+ years in security engineering, with hands-on DRM design experience on Kiteworks, AIP/RMS, or Virtru, plus strong PKI/KMS knowledge.