Senior Data Security Engineer

Описание вакансии

Who we are!

Platinum Technologies is a Northern Virginia based integrated solutions firm that specializes in Cybersecurity, Cloud and Digital Services to the Public Sector. Our team solves hard problems and helps our Mission Partners achieve their goals. If you are self-motivated, possess demonstrated learning agility, and are passionate about delivering high-quality work products – we want to hear from you.

We lead with technical expertise, but that is just the tip of the iceberg – the ‘Why’ matters. At Platinum, we don’t hire people to do a job. We provide professional and leadership development to complement our self-motivated domain experts. Our teammates are dot-connecting leaders that operate in a mutually accountable environment to deliver thought leadership, expert technical analysis, and quality execution for our clients.

Platinum Technologies is seeking a Senior Data Security Engineer (DRM Specialist) to join our company.  As the Senior DRM Specialist, you will be responsible for the configuration and enforcement of advanced encryption policies using Kiteworks (on SIPR and Top-Secret networks) and Microsoft Purview Information Protection (on NIPR). You will move the Command beyond simple file encryption to a granular, identity-aware protection model. You will design the "Data Policy Engineer" rules that act as the Policy Decision Point (PDP), ensuring that a user’s ability to decrypt a file is dynamically brokered in real-time based on their "Trust Attributes" (clearance, role, and risk level). You will also manage the complex Key Management lifecycles required to maintain a seamless user experience in a high-security, hybrid environment

This role requires an active Top Secret/SCI. The position will be in Tampa, Florida.

What you get to do.

•Architect and configure the Kiteworks Private Content Network (SIPR/Top Secret) and Microsoft Purview (NIPR) to serve as the central Policy Decision Points (PDP) for file access.

•Translate NIST 8112 metadata attributes into concrete DRM policies (e.g., "Allow View ONLY if User.Clearance >= TopSecret AND Device.State = Compliant").

•Manage the lifecycle of encryption keys (Bring Your Own Key - BYOK, Customer Managed Keys) ensuring FIPS 140-2/3 compliance and availability across hybrid and air-gapped environments.

•Configure advanced DRM features such as SafeVIEW and SafeEDIT in Kiteworks to allow users to view and edit sensitive documents in a secure, containerized stream without the data ever leaving the controlled repository.

•Define and enforce "Rights Management" controls, specifically preventing actions like Copy/Paste, Screen Capture, and Printing for documents tagged with specific sensitivity labels (e.g., CUI, Secret/NoForn).

Requirements.

•Active Top-Secret/SCI Clearance

•Master of Science (MS) degree in Cybersecurity, Computer Science, Mathematics (Cryptography focus), or a related technical field.

•10+ years of technical related experience.

•CompTIA Security+ CE (or higher) to meet DoD 8570 IAT Level II requirements.

•Extensive hands-on experience (5+ years) designing and administering Enterprise Digital Rights Management (EDRM) or Information Rights Management (IRM) systems, specifically Kiteworks, Microsoft Azure Information Protection (AIP/RMS), or Virtru.

•Deep understanding of cryptographic protocols (AES-256, RSA), Public Key Infrastructure (PKI), and Key Management Service (KMS) operations.

•Proven ability to design complex Attribute-Based Access Control (ABAC) logic and Conditional Access policies.

•Understanding of how encryption travels across Cross-Domain Solutions (CDS) and the challenges of key management in air-gapped networks.

The Company is an Equal Opportunity/Affirmative Action employer. All qualified candidates will receive consideration for employment without regard to disability, protected veteran status, race, color, religious creed, national origin, citizenship, marital status, sex, sexual orientation/gender identity, age, or genetic information.