Description :JOB SUMMARYLocation:Remote (United States)Eligibility:U.S. Citizenship is required.The Senior Data Protection Engineer is a critical member of the Data Protection team, responsible for the design, implementation, and maintenance of the organization's data protection infrastructure and applications. The Senior Engineer will lead complex projects, troubleshoot critical incidents, and provide technical guidance and mentorship to team members. They will also lead the development of Data Protection engineering policies, standards and procedures. This role requires deep expertise in Microsoft Purview, ForcePoint, BigID, Varonis, Windows, Linux, GKE, Encryption, and other data loss prevention (DLP) and data security posture management (DSPM) tools.ESSENTIAL RESPONSIBILITIESLead the design, implementation, and maintenance of the organization's data protection infrastructure across multiple platforms and vendors, ensuring optimal performance, scalability, and security. This includes DLP, DSPM, data de-identification solutions, and etc.Design and architect robust data protection solutions that align with business requirements and industry best practices. This encompasses both on-premises and cloud-based environments (GCP, AWS, Azure).Develop, implement, and maintain data protection policies across all relevant platforms and systems. This includes configuring sensitive information types, tuning detection parameters, managing exception lists, and etc.Conduct thorough root cause analysis to determine the underlying causes of errors, leveraging advanced troubleshooting techniques and escalating to appropriate teams when necessary to ensure timely and effective remediationProactively manage complex data protection projects with minimal supervision, leading meetings, providing technical presentations, and effectively communicating project status and proposals to stakeholders. This includes representing the data protection engineering team in cross-functional initiativesDevelop custom data protection solutions and automation scripts (e.g., PowerShell, Python) to enhance efficiency, streamline processes, and support the deployment and maintenance of data protection software. This includes integrating with existing systems, and leveraging DevOps practices such as Git, CI/CD pipelines, and Helm charts for efficient deployment and management.Provide technical leadership and mentorship to team members, fostering a culture of continuous learning and improvement within the data protection teamStay up-to-date on relevant data privacy regulations and industry standards, ensuring the organization maintains a strong data protection postureOther duties as assigned or requested.EXPERIENCERequired7 years of experience with Data Loss Prevention7 years of experience with Information Security and Systems Analysis5 years of experience with at least two modern programming languages (Python, Java, JavaScript, BASH, PowerShell etc.)5 years of experience with designing and providing architectural support to at least two of the following cloud service providers: Google Cloud Platform, Amazon Web Services or Azure5 years of experience with deploying and maintaining infrastructure for DLP software's5 years of experience with creating and managing DLP policies5 years of experience with Operating Systems and Software AdministrationPreferred3 years of experience with Kubernetes or other Container orchestration technologies3 years of experience with Gitlab or other versioning control tools and processesSKILLSDemonstrates ability to achieve stretch goals in a highly innovative and fast-paced environment.Ability to communicate and present to other technology groups and leadersKubernetes or other Container orchestration technologiesGitlab or other versioning control tools and processesTerraform or other automation technologiesSkills in infrastructure support, such as networkingStrong teamwork and inter-personal skillsFamiliarity with secure SDLC best practicesKnowledge of HITRUST CSF, NIST 800-83 cyber security framework, PCI, HIPAA, HITECH, COBIT, ISO 27001/2, and ITIL 3EDUCATIONRequiredBachelor’s degree in Information Security, Information Systems, Information Assurance, Computer Science or related fieldSubstitutions7 years of Information Security, Governance, Risk and/or Compliance, Information Technology or Business Analysis with at least 5 years of experience with hands-on Engineering principlesPreferredMaster’s degree in Information Security, Information Systems, Information Assurance, Computer Science or related fieldLICENSES or CERTIFICATIONSRequiredNonePreferredCISSPAdvanced certification in any of these cloud providers - GCP, AWS or Azure (E.g. Professional Cloud Architect/Security Engineer)Terraform or similar certificationLanguage:NoneTravel Required:Less than 25%PHYSICAL, MENTAL DEMANDS and WORKING CONDITIONSPosition Type Office-Based or Remote PositionPhysical work site requiredOccasionallyPay Range Minimum:$78,900.00Pay Range Maximum:$147,500.00Highmark Health and its affiliates prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities and prohibit discrimination against all individuals based on any category protected by applicable federal, state, or local law.We endeavor to make this site accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact the email below.For accommodation requests, please contact HR Services Online at
Job Title
Senior Data Protection Engineer