Senior Data Security Engineer
About The Position
Platinum Technologies is seeking a Senior Data Security Engineer (DRM Specialist) to join our company. As the Senior DRM Specialist, you will be responsible for the configuration and enforcement of advanced encryption policies using Kiteworks (on SIPR and Top-Secret networks) and Microsoft Purview Information Protection (on NIPR). You will move the Command beyond simple file encryption to a granular, identity-aware protection model. You will design the "Data Policy Engineer" rules that act as the Policy Decision Point (PDP), ensuring that a userâs ability to decrypt a file is dynamically brokered in real-time based on their "Trust Attributes" (clearance, role, and risk level). You will also manage the complex Key Management lifecycles required to maintain a seamless user experience in a high-security, hybrid environment This role requires an active Top Secret/SCI. The position will be in Tampa, Florida.
Requirements
- Active Top-Secret/SCI Clearance
- Master of Science (MS) degree in Cybersecurity, Computer Science, Mathematics (Cryptography focus), or a related technical field.
- 10+ years of technical related experience.
- CompTIA Security+ CE (or higher) to meet DoD 8570 IAT Level II requirements.
- Extensive hands-on experience (5+ years) designing and administering Enterprise Digital Rights Management (EDRM) or Information Rights Management (IRM) systems, specifically Kiteworks, Microsoft Azure Information Protection (AIP/RMS), or Virtru.
- Deep understanding of cryptographic protocols (AES-256, RSA), Public Key Infrastructure (PKI), and Key Management Service (KMS) operations.
- Proven ability to design complex Attribute-Based Access Control (ABAC) logic and Conditional Access policies.
- Understanding of how encryption travels across Cross-Domain Solutions (CDS) and the challenges of key management in air-gapped networks.
Responsibilities
- Architect and configure the Kiteworks Private Content Network (SIPR/Top Secret) and Microsoft Purview (NIPR) to serve as the central Policy Decision Points (PDP) for file access.
- Translate NIST 8112 metadata attributes into concrete DRM policies (e.g., "Allow View ONLY if User.Clearance >= TopSecret AND Device.State = Compliant").
- Manage the lifecycle of encryption keys (Bring Your Own Key - BYOK, Customer Managed Keys) ensuring FIPS 140-2/3 compliance and availability across hybrid and air-gapped environments.
- Configure advanced DRM features such as SafeVIEW and SafeEDIT in Kiteworks to allow users to view and edit sensitive documents in a secure, containerized stream without the data ever leaving the controlled repository.
- Define and enforce "Rights Management" controls, specifically preventing actions like Copy/Paste, Screen Capture, and Printing for documents tagged with specific sensitivity labels (e.g., CUI, Secret/NoForn).
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
Number of Employees
1-10 employees
