CYBERSECURITY ENGINEER - DATA LOSS PREVENTION

Location(s)


Remote with travel required to client's place of performance in Columbus, OH or Richmond, VA

Overview


iP-Plus Consulting is seeking a Cybersecurity Engineer to support an upcoming federal program. The Cybersecurity Engineer serves as a hands-on technical operator responsible for the design, integration, and sustainment of enterprise Data Loss Prevention solutions across a hybrid DoD cloud environment. The candidate will work directly with Microsoft Purview and Forcepoint DLP to protect sensitive government data across M365, SharePoint Online, OneDrive, Teams, and Azure IL4+ environments. In this role, the candidate will operate as part of a Tier 3 DLP support team, executing policy engineering, incident remediation, compliance management, and system sustainment while supporting one of the DoD's most critical data protection programs.


Key Responsibilities

• Design, configure, and tuneMicrosoft PurviewandForcepoint DLPpolicies, rulesets, and workflows across an enterprise DoD environment

• ProvideTier 3engineering support for DLP infrastructure including fault isolation, root cause analysis, and incident remediation

• Support the integration of DLP solutions with the broader IT infrastructure includingM365,Azure IL4+,SharePoint Online,OneDrive, andTeams

• PerformSTIGhardening and maintain configuration compliance across all DLP components in accordance withDISASecure Technical Implementation Guides

• Assist with data-at-rest scanning operations, false positive reduction, and ongoing performance tuning of DLP platforms

• Manage and execute software updates, firmware patches, and service packs in compliance withDoD IAdirectives and agency change management processes

• Support the development and submission of required documentation includingECRforms,PPSMforms,LCAforms, andInformation Assurancepackages

• Participate in on-call rotation to provide24/7/365coverage for critical DLP infrastructure issues

• Develop and maintain operational documentation includingSOPs,CONOPS, troubleshooting guides, and training materials

• Supportremediation workflow automationefforts and assist withAuthorization to Operate (ATO)documentation forDoD IL4+environments

• Coordinate with agency stakeholders including privacy, incident response, vulnerability management, andInformation Assurancepersonnel

• Generate operational status reports for agency leadership and DoD reporting requirements as required

• Ensure all DLP systems maintain compliance with federal data protection standards,DoD IApolicies, and applicable regulatory requirements

Required Qualifications

• Minimumseven (7) yearsof relevantIT and cybersecurityexperience

• ActiveDoD Secret clearancewith eligibility forIT-I Critical Sensitive / Tier 5 (T5)investigation

• Must possessIT-II Non-Critical Sensitive / Tier 3 (T3)clearance at time of application

• DoD 8570/8140 IAT Level IIcertification (Security+ CE,CySA+,CASP+, or equivalent)

• CNDSP-IScertification or equivalent (CySA+,CASP+,GCIH,GCIA, orCISSP)
• Hands-on experience implementing and administeringMicrosoft Purview DLPin an enterprise environment
• Familiarity withDoD cloudenvironments includingAzure IL4+andM365security architecture
• Experience working withinDoD change managementprocesses includingECR,PPSM, andLCAdocumentation
• Strong working knowledge ofDISA STIGsand federalIA complianceframeworks

Required Certifications

• IAT Level II- Must hold at least one of the following:
  
  
  • Security+ CE, CySA+, CASP+, or CISSP
• CNDSP-IS- Must hold at least one of the following:
  
  
  • CySA+, CASP+, GCIH, GCIA, or CISSP
• Computing Environment / DLP Administrator- Must hold at least one of the following:
  
  
  • SC-400(Microsoft Information Protection Administrator), Forcepoint Certified Administrator (FCA), Forcepoint DLP Administrator, or Equivalent platform certification accepted with documented justification
• Mus meetDoD 8570/8140certification requirements prior to starting work and maintain certifications for the full duration of the contract

Preferred Qualifications

• Hands-on experience withForcepoint DLPadministration and policy engineering
• Experience withDLP remediation workflow automationin aDoD IL4or higher environment
• Prior work experience within aDoD ComponentIT environment
• Microsoft certifications includingSC-400,AZ-500, orSC-100
• Familiarity withSQLdatabase environments and application-level troubleshooting
• Experience supportingATOpackages inDoD cloudenvironments
• Background with adjacent DLP platforms such asSymantec DLP,Trellix,Digital Guardian, orBroadcom DLP

Clearance Requirement

• ActiveSecret clearancerequired
• Must be eligible for and willing to undergoIT-I Critical Sensitive / Tier 5investigation

This position is contingent upon contract award. Employment is expected to begin upon successful award and funding of the program.