Cloud Engineer Jobs

About The Position

Requirements

• Experience with Data Loss Prevention (DLP), cloud integration, and security engineering in enterprise environments.
• Strong familiarity with networking, firewalls, and data-protection technologies, with the ability to troubleshoot application- and transport-layer issues.
• Ability to automate security processes using scripting languages and build incident alerting, response, and remediation workflows.
• Ability to collaborate with Operations and Network teams.
• Bachelor’s degree in Computer Science, Computer Information Systems, or Electrical Engineering.

Nice To Haves

• Expertise architecting and engineering DLP solutions integrated across user, network, email, and cloud environments.
• Knowledge of CASB/MCAS, Active Directory, Kerberos, and TLS encryption for enterprise data protection.
• Experience with three-tier DLP installations, upgrades, health checks, and policy fine-tuning to reduce false positives.
• Hands-on familiarity with network traffic analysis, VPN tunneling, NAT, and proxy configurations such as PAC and ICAP.
• Track record of designing and implementing automated, scalable security controls aligned with evolving business and compliance needs.

Responsibilities

• Implement enterprise security controls and develop information-protection solutions.
• Architect and engineer enterprise DLP solutions and integrate controls across user environments.
• Advise on Data Loss Policy development and configure DLP policies to prevent data loss in email and web traffic.
• Perform three-tier DLP installations and production version upgrades, and conduct periodic health checks and performance assessments.
• Create production deployment procedures and workflows, and publish fixes in the knowledge base.
• Configure network scans on DLP detection servers to identify sensitive data at rest and quarantine data classified as Restricted.
• Generate data indexes or fingerprints remotely for Exact Data Match (EDM) detection rules.
• Extend DLP capabilities to cloud applications using MCAS/CASB to monitor protected data in motion and at rest.
• Automate security procedures using scripting languages appropriate to the operating system.
• Configure detection-server traffic routing through specific TCP ports and build rules to monitor data stored or transferred from endpoint devices.
• Configure preventative actions for HTTP/S, FTP, SMTP, SMB, SFTP, and other protocols, including web blocking, email encryption, and quarantine for outgoing traffic.
• Troubleshoot firewalls, traffic routing, proxies, gateways, and application- and transport-layer protocols.
• Develop PAC files and configure Network Prevent DLP detection servers to use ICAP.
• Interpret network diagrams and apply knowledge of VPN tunneling, NAT, OSI, LAN/WAN, SSL, and packet-trace analysis to DLP architecture and traffic routing.
• Configure Active Directory connections over TCP using LDAP and enable Kerberos authentication by modifying Kerberos initialization files.
• Configure Active Directory security group policies for DLP user and group exceptions to restrict data access and usage.
• Generate key pairs and configure keys and certificates for end-to-end TLS email encryption.
• Collaborate with Operations to troubleshoot production issues and perform root cause analysis of data loss caused by network or email detection failures.
• Debug network traffic logs and tune detection-server service memory settings based on traffic load.
• Use SIEM tools to monitor suspicious user activity in network traffic.
• Develop DLP incident alerting, response, and remediation workflows; analyze incidents to identify malicious insiders and false positives and fine-tune detection rules.
• Build user attributes for identified DLP security incidents.
• Modify firewall rules to enable communication between DLP detection servers while maintaining compliance with company firewall policy.

Benefits

• PTO
• Paid sick leave
• Holidays
• Health insurance
• Dental insurance
• Vision insurance
• Retirement
• Highly competitive compensation
• Professional development
• Career advancement