Senior Data Protection Engineer

Highmark Health

60d • Remote

About The Position

The Senior Data Protection Engineer is a critical member of the Data Protection team, responsible for the design, implementation, and maintenance of the organization's data protection infrastructure and applications. The Senior Engineer will lead complex projects, troubleshoot critical incidents, and provide technical guidance and mentorship to team members. They will also lead the development of Data Protection engineering policies, standards and procedures. This role requires deep expertise in Microsoft Purview, ForcePoint, BigID, Varonis, Windows, Linux, GKE, Encryption, and other data loss prevention (DLP) and data security posture management (DSPM) tools.

Requirements

• 7 years of experience with Data Loss Prevention
• 7 years of experience with Information Security and Systems Analysis
• 5 years of experience with at least two modern programming languages (Python, Java, JavaScript, BASH, PowerShell etc.)
• 5 years of experience with designing and providing architectural support to at least two of the following cloud service providers: Google Cloud Platform, Amazon Web Services or Azure
• 5 years of experience with deploying and maintaining infrastructure for DLP software's
• 5 years of experience with creating and managing DLP policies
• 5 years of experience with Operating Systems and Software Administration
• Bachelor’s degree in Information Security, Information Systems, Information Assurance, Computer Science or related field
• U.S. Citizenship is required.

Nice To Haves

• 3 years of experience with Kubernetes or other Container orchestration technologies
• 3 years of experience with Gitlab or other versioning control tools and processes
• Master’s degree in Information Security, Information Systems, Information Assurance, Computer Science or related field
• CISSP
• Advanced certification in any of these cloud providers - GCP, AWS or Azure (E.g. Professional Cloud Architect/Security Engineer)
• Terraform or similar certification
• Skills in infrastructure support, such as networking
• Strong teamwork and inter-personal skills
• Familiarity with secure SDLC best practices
• Knowledge of HITRUST CSF, NIST 800-83 cyber security framework, PCI, HIPAA, HITECH, COBIT, ISO 27001/2, and ITIL 3
• Terraform or other automation technologies

Responsibilities

• Lead the design, implementation, and maintenance of the organization's data protection infrastructure across multiple platforms and vendors, ensuring optimal performance, scalability, and security. This includes DLP, DSPM, data de-identification solutions, and etc.
• Design and architect robust data protection solutions that align with business requirements and industry best practices. This encompasses both on-premises and cloud-based environments (GCP, AWS, Azure).
• Develop, implement, and maintain data protection policies across all relevant platforms and systems. This includes configuring sensitive information types, tuning detection parameters, managing exception lists, and etc.
• Conduct thorough root cause analysis to determine the underlying causes of errors, leveraging advanced troubleshooting techniques and escalating to appropriate teams when necessary to ensure timely and effective remediation
• Proactively manage complex data protection projects with minimal supervision, leading meetings, providing technical presentations, and effectively communicating project status and proposals to stakeholders. This includes representing the data protection engineering team in cross-functional initiatives
• Develop custom data protection solutions and automation scripts (e.g., PowerShell, Python) to enhance efficiency, streamline processes, and support the deployment and maintenance of data protection software. This includes integrating with existing systems, and leveraging DevOps practices such as Git, CI/CD pipelines, and Helm charts for efficient deployment and management.
• Provide technical leadership and mentorship to team members, fostering a culture of continuous learning and improvement within the data protection team
• Stay up-to-date on relevant data privacy regulations and industry standards, ensuring the organization maintains a strong data protection posture
• Other duties as assigned or requested.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 5,001-10,000 employees