Sr. Data Protection Engineer

Job Description

Job Description

About Us

Clayco is a full-service, turnkey real estate development, master planning, architecture, engineering, and construction firm that safely delivers clients across North America the highest quality solutions on time, on budget, and above and beyond expectations. With $8.1 billion in revenue for 2025, Clayco specializes in the "art and science of building," providing fast track, efficient solutions for mission critical, industrial, life sciences, power & energy, aviation, commercial, institutional, residential and sports & entertainment related building projects.

The Role We Want You For

Under the direction of the Data Protection Manager, the Sr. Data Protection Engineer is a senior technical role focused primarily on the engineering, operation, and optimization of Clayco's Data discovery & classification, Data Loss Prevention (DLP), and Cloud Access Security Broker (CASB) solutions, while also supporting the broader integrations and complimentary solutions. The role is responsible for engineering effective, supportable, and sustainable control configurations to meet the design requirements and objectives of our security control solutions, including initial implementations, life-cycle management changes, and necessary integrations.  Operation, oversight, gap remediation, and change management of these solutions as a member of the Data Protection team will be included in the day-to-day responsibilities.

This role will oversee the Data discovery & classification, Data Loss Prevention (DLP), & Cloud Access Security Broker (CASB) solutions for Clayco's enterprise environment to include configuration and administration of applicable policies, alerts, Data sources, and remediation of any misconfigurations. This role will also identify and remediate gaps across dependent integrations and services to include discovery integrations, agent deployments, configuration changes, and tuning activities.

The Specifics of the Role

• As a member of the Information Security Team, contributes however and whenever necessary to Incident Response efforts as circumstances dictate.
• Operates the Data Loss Prevention (DLP) and Cloud Access Security Broker (CASB) solutions to include their administration, maintenance, support, troubleshooting, and optimization of the solutions such as:
• Endpoint, Network, and Cloud/SaaS DLP Platforms
• Host-based DLP Agents and CASB Connectors
• Required Integrations (CASB, SaaS APIs, Identity Provider, SIEM/SOAR)
• Data classification & Sensitive Data discovery Inputs
• Detection and Alert logic and configurations
• Conducts regularly scheduled and ad-hoc Data discovery and policy scans across endpoints, network, and cloud/SaaS applications, ensuring that high-fidelity DLP and CASB detection Data is successfully and reliably ingested into the Incident Management & Workflow Platform in coordination with GRC.
• Partners with GRC and business units to map Data flows, classify Sensitive Data, and address Data-protection gaps by aligning DLP and CASB policies with regulatory and contractual requirements (e.g., CCPA, HIPAA, PCI-DSS) and deploying specialized controls (encryption, tokenization, blocking, or quarantine) as needed.
• Develops DLP and CASB incident reports, Data-Risk ratings, and compliance scorecards that define the current state of Data exposure for Clayco's environment.
• Designs, tests, and tunes DLP detection rules and Data classification policies (e.g., PII, PCI, PHI, source code, financials, and confidential business Data) to balance Data protection with business productivity while minimizing false positives.
• Administers CASB controls for sanctioned and unsanctioned cloud applications, including Shadow IT discovery, application Risk scoring, and enforcement of access, sharing, and Data-residency policies.
• Triages, investigates, and resolves DLP and CASB alerts, coordinating with Incident Response, HR, and Legal on potential Data exfiltration and insider-Risk events.
• Maintains DLP and CASB policy, exception, and runbook documentation, and produces KRI/KPI metrics on Data-loss events, policy violations, and remediation timelines.
• Understands and complies with Clayco's Change Management process to ensure that change is justified, tested, approved, and communicated effectively.
• Serves as a senior technical resource and mentor on DLP and CASB matters, providing guidance to InfoSec Analysts and Engineers and representing the Data-protection program in cross-functional initiatives.
• Interfaces with vendor support teams to keep abreast of developments in product lines.
• Performs other duties as assigned.

Requirements

• Bachelor's Degree (Cybersecurity, Computer Science, or Information Technology) preferred, or equivalent work experience.
• Certified Cloud Security Professional (CCSP, (ISC)²), Cloud Security Alliance Certificate of Cloud Security Knowledge (CSA CCSK), or equivalent (current status or obtained within 6 months of assuming role).
• 6-8 years of technical work experience in Information Security.
• 3-5 years of direct work-related Cybersecurity Operations experience, including hands-on experience administering and engineering Data Loss Prevention (DLP) and Cloud Access Security Broker (CASB) solutions, as well as Security Control Engineering (firewalls, email security gateways, WAFs, etc.).
• Experience with scripting languages (Python, PowerShell, BASH, etc.).
• Understanding of malware, emerging threats, attacks, and vulnerability exploitation with a personal drive to continue learning.
• Experience in Enterprise Client-Server, Cloud (Azure, AWS, GCP), & IoT Hybrid environments and knowledge of how various technologies and processes interact and behave.
• Knowledge of secure network/systems configuration management as well as an understanding of networking protocols, concepts, and devices.
• Excellent oral and written communication skills, including the ability to document functional requirements, test and validation criteria, communication plans, KRI/KPI reports, and other relevant operational communications.
• Ability to respond to incidents or outages 24/7, including holidays and weekends.
• Ability to thrive in a fast-paced environment.
• Minimal travel required.

Some Things You Should Know

• No other builder can offer the collaborative design-build approach that Clayco does.
• We work on creative, complex, award-winning, high-profile jobs.
• The pace is fast!
• This position is classified as a safety-sensitive role in accordance with applicable state and federal laws. Candidates selected for this position will be subject to a comprehensive background check, which includes mandatory drug testing

Why Clayco?

• 2025 Best Places to Work – St. Louis Business Journal, Los Angeles Business Journal, and Phoenix Business Journal.
• 2025 ENR Top 400 – Top Data Center Contractor (Top 3).
• 2025 ENR Top 100 Design-Build Firms – Design-Build Contractor (Top 5).
• 2025 ENR Top 100 Green Contractors – Green Contractor (Top 3).

Benefits

• Discretionary Annual Bonus: Subject to company and individual performance.
• Comprehensive Benefits Package Including: Medical, dental and vision plans, 401k, generous PTO and paid company holidays, employee assistance program, flexible spending accounts, life insurance, disability coverage, learning & development programs and more!

Compensation

• The salary range for this position considers a wide range of factors in making compensation decisions including but not limited to: Education, qualifications, skills, training, experience, certifications, internal equity, and location. It is not typical for an individual to be hired at or near the top of the range for the role and compensation decisions are dependent on the facts and circumstances of each case. The Clayco Nationwide salary range for this position is approximately $125,000 - $155,000 +/- annually (not adjusted for location).