CACI bv ยท 4 weeks ago
Senior Data Protection Engineer
Tampa, FL
Full-time
Onsite
Senior Level, Lead/Staff
$100K/yr - $220K/yr
10+ years expCACI is looking for an experienced Data Protection Engineer to join the Network Execution Team to work on Zero Trust implementation efforts in support of U.S. Special Operations Command. This role is essential for the tactical implementation of data-centric security controls across the Command's hybrid environment, responsible for configuring, deploying, and tuning encryption and labeling technologies to protect sensitive data.
ConsultingEducationTraining
No H1B
Security Clearance RequiredU.S. Citizen Only
Responsibilities
Microsoft Purview Implementation (NIPR): Configure and deploy Sensitivity Labels, Auto-labeling policies, and Data Loss Prevention (DLP) rules within the Microsoft 365 E5 suite to classify and protect CUI and PII in SharePoint, OneDrive, and Exchange
DRM & Encryption Configuration (SIPR/Top Secret): Implement and manage enterprise Digital Rights Management (DRM) solutions (specifically Virtru or Kiteworks) to enforce encryption-at-rest and attribute-based access control on classified networks
Policy Tuning & Enforcement: Oversee the phased transition of security policies from "Monitoring" mode to "Blocking" mode, analyzing false positives and tuning classifiers (Regex, Keyword Dictionaries, Trainable Classifiers) to minimize mission disruption
Endpoint Protection: Collaborate with the Trellix engineering team to ensure that data tags applied by Purview/DRM tools are correctly recognized and enforced by endpoint DLP agents on workstations
Cross-Domain Support: Assist in the manual "sneaker-net" transfer of policy updates and classification patterns to the air-gapped Top Secret environment, ensuring configuration consistency across all networks
Qualification
Required
Must hold a current Top Secret clearance and be SCI eligible
Education: MA/MS Degree. A Senior labor category typically works on high-visibility or mission critical aspects of a given program and performs all functional duties independently. A Senior labor category may oversee the efforts of less senior staff and/or be responsible for the efforts of all staff assigned to a specific job. Bachelor's degree in computer science, Information Systems, Cybersecurity, or related field acceptable with additional experience (Master's preferred)
10+ years of experience implementing and enforcing data protection in DoD organizations. Additional years of experience may be used in place of Education requirement
Microsoft Purview Expertise: Significant (3+ years) hands-on experience configuring Microsoft Information Protection (MIP), Sensitivity Labels, and DLP policies in a large enterprise or DoD environment
DRM/Encryption Experience: Proven experience implementing and managing enterprise encryption and Rights Management tools such as Virtru, Kiteworks, or Seclore, particularly in on-premise or hybrid configurations
Data Classification: Strong understanding of data classification methodologies, including the creation of custom sensitive info types (SITs) using Regex and Exact Data Match (EDM)
Technical Troubleshooting: Ability to diagnose and resolve complex issues related to encryption key management, policy propagation, and agent conflicts
DoD 8140 Compliance
DoDM 8570 IAT II certification (e.g. CompTIA Security+) or higher
Preferred
DoD 8570 Compliance: Meet IAT Level III and IASAE II requirements
Microsoft Information Protection Administrator (SC-400) certification
Virtru Certified Professional or Kiteworks Administrator Certification
Experience with Trellix DLP (formerly McAfee) endpoint products
Knowledge of NetApp BlueXP or BigID for data discovery
Prior experience supporting USSOCOM or working on SIPRNet/JWICS systems
Familiarity with DoD Data Strategy and CUI handling requirements
Strong communication skills with ability to brief senior leadership and interface with stakeholders
Ability to lead teams in complex, multi-vendor environments
Benefits
Healthcare
Wellness
Financial
Retirement
Family support
Continuing education
Time off benefits
Company
CACI bv
CACI levert, implementeert en beheert bedrijfskritische oplossingen voor het Hoger Onderwijs: het StudentInformatieSysteem OSIRIS en LISA voor zaakgericht werken.
51-200 employees
Funding
Current Stage
Growth StageCompany data provided by crunchbase