Athenix Solutions Group · 13 hours ago
Data Protection Engineer, Zero Trust Program (USSOCOM) - Journeyman
Athenix Special Missions is seeking a Data Protection Engineer to support a critical Zero Trust initiative at U.S. Special Operations Command (USSOCOM). This role involves implementing data-centric security controls and ensuring the protection of sensitive data across various networks. The engineer will be responsible for configuring and deploying encryption and labeling technologies to enhance data security.
Software
Responsibilities
Configure and deploy Sensitivity Labels, Auto-labeling policies, and Data Loss Prevention (DLP) rules within the Microsoft 365 E5 suite to classify and protect CUI and PII in SharePoint, OneDrive, and Exchange
Implement and manage enterprise Digital Rights Management (DRM) solutions (specifically Virtru or Kiteworks) to enforce encryption-at-rest and attribute-based access control on classified networks
Oversee the phased transition of security policies from "Monitoring" mode to "Blocking" mode, analyzing false positives and tuning classifiers (Regex, Keyword Dictionaries, Trainable Classifiers) to minimize mission disruption
Collaborate with the Trellix engineering team to ensure that data tags applied by Purview/DRM tools are correctly recognized and enforced by endpoint DLP agents on workstations
Assist in the manual "sneaker-net" transfer of policy updates and classification patterns to the air-gapped Top Secret environment, ensuring configuration consistency across all networks
Qualification
Required
Must be a U.S. Citizen
Active Top-Secret clearance with SCI eligibility
Significant (3+ years) hands-on experience configuring Microsoft Information Protection (MIP), Sensitivity Labels, and DLP policies in a large enterprise or DoD environment
Proven experience implementing and managing enterprise encryption and Rights Management tools such as Virtru, Kiteworks, or Seclore, particularly in on-premises or hybrid configurations
Strong understanding of data classification methodologies, including the creation of custom sensitive info types (SITs) using Regex and Exact Data Match (EDM)
Ability to diagnose and resolve complex issues related to encryption key management, policy propagation, and agent conflicts
BA/BS or MA/MS degree
3-10 years of experience
Preferred
Experience with Trellix DLP (formerly McAfee) endpoint products
Knowledge of NetApp BlueXP or BigID for data discovery
Prior experience supporting USSOCOM or working on SIPRNet/JWICS systems
Familiarity with DoD Data Strategy and CUI handling requirements
Microsoft Information Protection Administrator (SC-400)
Virtru Certified Professional or Kiteworks Administrator Certification
Company
Athenix Solutions Group
For Missions That Cannot Fail Athenix Solutions Group is focused exclusively on serving the Intelligence Community, DoD Cyber, Special Operations, and others who operate at the edge.