Data Protection Engineer

About This Role

As a Data Protection Engineer, you will be the hands-on technical lead for implementing and enforcing encryption, labeling, and data protection controls across classified and unclassified environments, turning architecture into action to ensure sensitive data protection.

Responsibilities

• Configure and manage Sensitivity Labels, auto-labeling, and DLP policies with Microsoft Purview (NIPR) to protect CUI and PII across Microsoft 365 (SharePoint, OneDrive, Exchange)
• Implement and manage enterprise DRM solutions (Virtru, Kiteworks) to enforce encryption and access controls on classified networks (SIPR/Top Secret)
• Tune classifiers and policies to reduce false positives and safely transition controls from audit to block mode
• Ensure data labels and protections are enforced by endpoint DLP tools (e.g., Trellix)
• Support controlled transfer of policy updates and classification logic into air-gapped Top Secret environments

Requirements

• Active TS/SCI clearance
• 3+ years hands-on experience with Microsoft Purview / Microsoft Information Protection
• Experience implementing enterprise DRM or encryption platforms (Virtru, Kiteworks, Seclore)
• Strong knowledge of data classification, including custom Sensitive Info Types (Regex, EDM)
• Ability to troubleshoot complex encryption, policy, and agent-related issues

Qualifications

• 3+ years hands-on experience with Microsoft Purview / Microsoft Information Protection

Skills

* Required skills