Senior Cloud Engineer

Fivesky•Alpharetta, GA

20d

About The Position

Fivesky is hiring a Senior Cloud Engineer to architect and engineer enterprise-wide Data Loss Prevention (DLP) solutions for large financial institutions. The role implements security controls and develops information-protection solutions across user, network, email, and cloud environments. It includes configuring DLP policies and detection systems, extending protection to cloud applications, automating security procedures, and helping ensure secure, stable, and scalable enterprise environments. The engineer will handle production DLP deployments, upgrades, health checks, performance assessments, and troubleshooting. The role also involves analyzing incidents and network traffic, developing alerting and response workflows, and collaborating with Operations and Network teams to investigate production issues and fine-tune detection rules. This is an FTE position based in Alpharetta, Georgia, or at unanticipated client sites within the United States. Compensation is based on experience and qualifications.

Requirements

Experience with Data Loss Prevention (DLP), cloud integration, and security engineering in enterprise environments.
Strong familiarity with networking, firewalls, and data-protection technologies, with the ability to troubleshoot application- and transport-layer issues.
Ability to automate security processes using scripting languages and build incident alerting, response, and remediation workflows.
Ability to collaborate with Operations and Network teams.
Bachelor’s degree in Computer Science, Computer Information Systems, or Electrical Engineering.

Nice To Haves

Expertise architecting and engineering DLP solutions integrated across user, network, email, and cloud environments.
Knowledge of CASB/MCAS, Active Directory, Kerberos, and TLS encryption for enterprise data protection.
Experience with three-tier DLP installations, upgrades, health checks, and policy fine-tuning to reduce false positives.
Hands-on familiarity with network traffic analysis, VPN tunneling, NAT, and proxy configurations such as PAC and ICAP.
Track record of designing and implementing automated, scalable security controls aligned with evolving business and compliance needs.

Responsibilities

Implement enterprise security controls and develop information-protection solutions.
Architect and engineer enterprise DLP solutions and integrate controls across user environments.
Advise on Data Loss Policy development and configure DLP policies to prevent data loss in email and web traffic.
Perform three-tier DLP installations and production version upgrades, and conduct periodic health checks and performance assessments.
Create production deployment procedures and workflows, and publish fixes in the knowledge base.
Configure network scans on DLP detection servers to identify sensitive data at rest and quarantine data classified as Restricted.
Generate data indexes or fingerprints remotely for Exact Data Match (EDM) detection rules.
Extend DLP capabilities to cloud applications using MCAS/CASB to monitor protected data in motion and at rest.
Automate security procedures using scripting languages appropriate to the operating system.
Configure detection-server traffic routing through specific TCP ports and build rules to monitor data stored or transferred from endpoint devices.
Configure preventative actions for HTTP/S, FTP, SMTP, SMB, SFTP, and other protocols, including web blocking, email encryption, and quarantine for outgoing traffic.
Troubleshoot firewalls, traffic routing, proxies, gateways, and application- and transport-layer protocols.
Develop PAC files and configure Network Prevent DLP detection servers to use ICAP.
Interpret network diagrams and apply knowledge of VPN tunneling, NAT, OSI, LAN/WAN, SSL, and packet-trace analysis to DLP architecture and traffic routing.
Configure Active Directory connections over TCP using LDAP and enable Kerberos authentication by modifying Kerberos initialization files.
Configure Active Directory security group policies for DLP user and group exceptions to restrict data access and usage.
Generate key pairs and configure keys and certificates for end-to-end TLS email encryption.
Collaborate with Operations to troubleshoot production issues and perform root cause analysis of data loss caused by network or email detection failures.
Debug network traffic logs and tune detection-server service memory settings based on traffic load.
Use SIEM tools to monitor suspicious user activity in network traffic.
Develop DLP incident alerting, response, and remediation workflows; analyze incidents to identify malicious insiders and false positives and fine-tune detection rules.
Build user attributes for identified DLP security incidents.
Modify firewall rules to enable communication between DLP detection servers while maintaining compliance with company firewall policy.