Data Protection Engineer

Highmark Health•Carolina, PA

About The Position

The Data Protection Engineer is a member of the Data Protection team responsible for implementing, maintaining, and operationally supporting the organization’s data protection infrastructure and applications. The role participates in complex projects, troubleshoots incidents, and contributes to improving data protection engineering policies, standards, and procedures, working closely with senior engineers to implement and maintain solutions. The position requires expertise in Microsoft Purview, ForcePoint, BigID, Varonis, Windows, Linux, GKE, encryption, and other data loss prevention (DLP) and data security posture management (DSPM) tools. The Engineer works across on-premises and cloud-based environments, including GCP, AWS, and Azure, and supports the protection of confidential and regulated information in accordance with company policies and applicable compliance requirements. This is an office-based or remote position, with the physical work site required occasionally. Travel is less than 25%. The stated pay range is $79,300 to $127,100; base pay depends on qualifications, experience, expected contributions, internal equity, market, and business considerations, and may be subject to geographic differentials.

Requirements

At least 5 years of experience with Data Loss Prevention.
At least 5 years of experience with Information Security and Systems Analysis.
At least 5 years of experience deploying and maintaining infrastructure for DLP software.
At least 5 years of experience creating and managing DLP policies.
Bachelor’s degree in Information Security, Information Systems, Information Assurance, Computer Science, or a related field; alternatively, 5 years of experience in Information Security, Governance, Risk and/or Compliance, Information Technology, or Business Analysis, including at least 3 years of hands-on engineering experience.
Knowledge of HITRUST CSF, NIST 800-83, PCI, HIPAA, HITECH, COBIT, ISO 27001/2, and ITIL 3.
Familiarity with secure SDLC best practices.
Knowledge of Kubernetes or other container orchestration technologies.
Knowledge of GitLab or other version control tools and processes.
Ability to achieve stretch goals in a highly innovative and fast-paced environment.
Ability to communicate and present to other technology groups and leaders.
Strong teamwork and interpersonal skills.
Strong sense of ownership, urgency, and drive.

Nice To Haves

At least 3 years of experience with at least two modern programming languages, such as Python, Java, JavaScript, BASH, or PowerShell.
At least 3 years of experience designing and providing architectural support for at least two of Google Cloud Platform, Amazon Web Services, or Azure.
Master’s degree in Information Security, Information Systems, Information Assurance, Computer Science, or a related field.
CISSP certification.
Advanced certification in GCP, AWS, or Azure, such as Professional Cloud Architect or Security Engineer.
Terraform or similar certification.

Responsibilities

Implement and maintain data protection infrastructure components across platforms and vendors, including DLP, DSPM, and data de-identification solutions.
Collaborate on the design and implementation of data protection solutions in on-premises and cloud environments, following best practices and business requirements.
Configure and maintain data protection policies, including sensitive information types, detection parameters, and exception lists.
Troubleshoot and resolve data protection incidents, perform root cause analysis, and escalate complex issues for remediation.
Contribute to data protection projects through testing, implementation, documentation, and participation in project meetings.
Develop and maintain automation scripts, such as PowerShell and Python scripts, to improve efficiency and support deployment and maintenance of data protection software.
Collaborate with team members to expand technical knowledge and expertise in data protection technologies.
Stay current with data protection technologies, industry best practices, and evolving compliance requirements.
Perform other duties as assigned or requested.
Comply with the company’s Code of Business Conduct, privacy and information security policies, HIPAA requirements, and applicable laws, regulations, policies, and training requirements.