Senior Subject Matter Expert; SME; Data Security & DSPM Implementation

Senior Subject Matter Expert (SME) - Data Security & DSPM Implementation RESULTS. INNOVATION. VALUES. ACCOUNTABILITY.

That’s RIVA.

We’re a mission-driven IT services company and systems integrator supporting digital transformation and modernization for federal government agencies. Since 2009, we’ve partnered with our customers to solve complex challenges through smart, practical innovation to deliver real outcomes where they matter most. Our teams are made up of industry-leading experts who are passionate about doing great work and making a difference. We don’t just develop solutions, we support efforts that strengthen communities and serve the public good.
RIVA’s culture is built on four core values:
Results, Innovation, Values, and Accountability. They guide how we work, how we collaborate, and how we measure success. Our employee-first approach is rooted in trust, ownership, and meaningful work. By investing in our people and fostering a flexible, supportive environment, employees have the opportunity to grow their skills, contribute ideas, and make an impact from day one. all while supporting missions that matter.

RIVA Solutions is seeking a Senior Subject Matter Expert (SME) specializing in enterprise data security, DSPM platforms, and cloud-native security operations. This SME provides hands-on technical leadership for the discovery, classification, and protection of sensitive data across the USPTO's hybrid environment—including approximately 4,000 Kubernetes containers, M365, AWS Gov Cloud, Azure Government, GCP, and on-premises systems—and serves as the program's foremost authority on Wiz Federal DSPM configuration, data platform integration, and AI artifact security for the Discovery and Classification objective (SOO 4.1.1) and AI Artifact Security objective (SOO 4.1.3).

• Lead requirements definition, configuration, and operationalization of the Wiz Federal DSPM platform (FedRAMP High, Class
  
  D) for enterprise-scale data discovery and classification across the USPTO's cloud repositories, SaaS platforms, developer work spaces, M365 collaboration environment, and on-premises data stores
• Define the content-class taxonomy collaboratively with USPTO subject-matter experts; configure classification rules and measure precision and recall for each rule set prior to Product Owner approval and publication in the Discovery and Classification Configuration guide
• Extend DSPM classification coverage to the USPTO's data analytics platform: integrate Wiz with Databricks, Unity Catalog, and Delta Share to ensure structured sensitive data assets are discovered, classified, and tracked in the Wiz Security Graph risk model
• Lead AI artifact security operations: configure Snyk Agent Scan within the Git Lab CI/CD pipeline to detect sensitive data and policy violations in AI-native artifact types—Markdown prompt files, cursor rules, Git Hub Copilot instruction files, and Model Context Protocol (MCP) configuration files—before they reach production
• Integrate DSPM findings with Axonius asset context and Tenable vulnerability data to produce the risk-scored source inventory delivered to the COR within 60 days; maintain and update the inventory as the cloud migration sequence advances
• Oversee integration of DSPM classification results with the Service Now SMP remediation workflow, defining severity-to-queue routing rules, SLA targets for each alert tier, and escalation paths to security operations
• Ensure DSPM findings flow into the three-tier evidence chain: XSIAM and QRadar SIEM telemetry for operational-tier reporting, AWS Cloud Watch for compliance-tier dashboard data, and AWS S3-archived outputs for executive-tier and audit reporting
• Deliver subject-matter briefings to…