Senior Data Protection Engineer, Classified Systems

Job description

Job responsibilities

• Assess the Classified Systems environment and design a data protection architecture that secures sensitive data across its full lifecycle.
• Partner with stakeholders and engineers across our teams to execute the architecture and implement controls and policies — both logical (access, classification, monitoring) and physical (storage, transport, destruction…
• Define the processes and standards for data protection and handling and develop the practice that operationalizes them across the organization.
• Deliver an end-to-end solution complete with mitigation — including incident response and automation to handle data spillages and sensitive removal requests — while maintaining compliance obligations across security,…

Job requirements

• Active Top Secret/SCI security clearance (required; candidates must currently hold this clearance).
• 7+ years of experience spanning security engineering and security architecture, with a track record of both designing solutions and building them hands-on in production environments.
• Demonstrated experience both designing and implementing data protection or security architectures across diverse environments — endpoints, file shares, cloud storage, collaboration tools, and on-prem systems.
• Proficiency in scripting and automation (e.g., Python, PowerShell, Bash) to implement controls and operationalize data protection at scale.
• Deep understanding of data classification, handling, and lifecycle protection — including both logical and physical controls — in a classified or regulated environment.
• Proven ability to lead architecture and process work end to end in ambiguous, greenfield settings — setting technical direction, aligning stakeholders and engineers, and influencing without formal authority.
• Experience supporting classified programs or working within a U.S. government / defense contractor security environment.
• Experience applying security and data governance frameworks (e.g., NIST 800-53/800-171, CMMC, zero-trust) to architecture and policy decisions.