Cybersecurity Engineer - Data Loss Prevention

Position: CYBERSECURITY ENGINEER - DATA LOSS PREVENTION
Location(s)

Remote with travel required to client's place of performance in Columbus, OH or Richmond, VA

Overview

iP-Plus Consulting is seeking a Cybersecurity Engineer to support an upcoming federal program. The Cybersecurity Engineer serves as a hands-on technical operator responsible for the design, integration, and sustainment of enterprise Data Loss Prevention solutions across a hybrid DoD cloud environment. The candidate will work directly with Microsoft Purview and Forcepoint DLP to protect sensitive government data across M365, SharePoint Online, One Drive, Teams, and Azure IL4+ environments.

In this role, the candidate will operate as part of a Tier 3 DLP support team, executing policy engineering, incident remediation, compliance management, and system sustainment while supporting one of the DoD's most critical data protection programs.

Key Responsibilities

• Design, configure, and tune Microsoft Purviewand Forcepoint DLPpolicies, rulesets, and workflows across an enterprise DoD environment

• Provide Tier 3engineering support for DLP infrastructure including fault isolation, root cause analysis, and incident remediation

• Support the integration of DLP solutions with the broader IT infrastructure includingM
  365,Azure IL4+,SharePoint Online,One Drive, and Teams

• Perform
  
  STIGhardening and maintain configuration compliance across all DLP components in accordance with
  
  DISASecure Technical Implementation Guides

• Assist with data-at-rest scanning operations, false positive reduction, and ongoing performance tuning of DLP platforms

• Manage and execute software updates, firmware patches, and service packs in compliance with
  
  DoD IAdirectives and agency change management processes

• Support the development and submission of required documentation including
  
  ECRforms,PPSMforms,LCAforms, and Information Assurancepackages

• Participate in on-call rotation to provide
  24/7/365coverage for critical DLP infrastructure issues

• Develop and maintain operational documentation including
  
  SOPs,CONOPS, troubleshooting guides, and training materials

• Supportremediation workflow automationefforts and assist with Authorization to Operate (ATO) documentation forDoD IL4+environments

• Coordinate with agency stakeholders including privacy, incident response, vulnerability management, and Information Assurancepersonnel

• Generate operational status reports for agency leadership and DoD reporting requirements as required

• Ensure all DLP systems maintain compliance with federal data protection standards,DoD IApolicies, and applicable regulatory requirements

Required Qualifications

• Minimumseven (7) yearsof relevant
  
  IT and cybersecurityexperience

• Active
  
  DoD Secret clearance with eligibility forIT-I Critical Sensitive / Tier 5 (T5) investigation

• Must possess
  
  IT-II Non-Critical Sensitive / Tier 3 (T3) clearance at time of application

• DoD 8570/8140 IAT Level II certification (Security+ CE,CySA+,CASP+, or equivalent)

• CNDSP-IScertification or equivalent (CySA+,CASP+,GCIH,GCIA, orCISSP)
• Hands-on experience implementing and administering
  
  Microsoft Purview DLPin an enterprise environment
• Familiarity with
  
  DoD cloudenvironments including
  
  Azure IL4+andM
  365security architecture
• Experience working within
  
  DoD change management processes including
  
  ECR,PPSM, andLCAdocumentation
• Strong working knowledge ofDISA STIGsand federal
  
  IA complianceframeworks

Required Certifications

• IAT Level II
  - Must hold at least one of the following:
  • Security+ CE, CySA+, CASP+, or CISSP
• CNDSP-IS
  - Must hold at least one of the following:
  • CySA+, CASP+, GCIH, GCIA, or CISSP
• Computing Environment / DLP Administrator
  - Must hold at least one of the following:
  • SC-400(Microsoft Information Protection Administrator), Forcepoint Certified Administrator (FCA), Forcepoint DLP Administrator, or Equivalent platform certification accepted with documented justification
• Mus meet
  
  DoD 8570/8140certification requirements prior to starting work and maintain certifications for the full duration of the contract

Preferred Qualifications

• Hands-on experience with Forcepoint DLPadministration and policy engineering
• Experience with
  
  DLP remediation workflow automation in aDoD IL4or higher environment
• Prior work experience within aDoD Component
  
  IT environment
• Microsoft certifications including
  
  SC-400,AZ-500, orSC-100
• Familiarity with
  
  SQL database environments and application-level troubleshooting
• Experience supporting
  
  ATOpackages inDoD cloudenvironments
• Background with adjacent DLP platforms such as Symantec DLP,Trellix,Digital Guardian, or Broadcom DLP

Clearance Requirement

• Active Secret clearance required
• Must be eligible for and willing to undergo
  
  IT-I Critical Sensitive / Tier 5investigation

This position is contingent upon contract award. Employment is expected to begin upon successful award and funding of the program.