Data Security Engineer; DRM Specialist

Job Description

Leidos is seeking a highly specialized Data Security Engineer (DRM Specialist) to serve as the subject matter expert for encryption standards and Digital Rights Management (DRM) within the USSOCOM Zero Trust program. While other engineers handle general labeling, this role ensures that the data itself is mathematically protected and self‑defending, regardless of its location.

As the Senior DRM Specialist
, you will configure and enforce advanced encryption policies using Kiteworks (on SIPR and Top‑Secret networks) and Microsoft Purview Information Protection (on NIPR). You will move the Command beyond simple file encryption to a granular, identity‑aware protection model, design the "Data Policy Engine" rules that serve as the Policy Decision Point (PDP), and manage the key‑management life cycles required to maintain a seamless user experience in a high‑security, hybrid environment.

• Enterprise DRM Architecture: Architect and configure the Kiteworks Private Content Network (SIPR/Top Secret) and Microsoft Purview (NIPR) as central Policy Decision Points for file access.
• ABAC Policy Design: Translate NIST 8112 metadata attributes into concrete DRM policies (e.g., "Allow View ONLY if User.
  
  Clearance >= Top Secret AND Device.
  
  State = Compliant").
• Key Management: Manage the lifecycle of encryption keys (BYOK, Customer Managed Keys), ensuring FIPS 140‑2/3 compliance and availability across hybrid and air‑gapped environments.
• Secure
  
  Collaboration:
  
  Configure advanced DRM features such as SafeVIEW and SafeEDIT in Kiteworks to allow secure viewing and editing of sensitive documents without the data ever leaving the controlled repository.
• Policy Enforcement: Define and enforce rights‑management controls that prevent actions such as Copy/Paste, Screen Capture, and Printing for documents tagged with specific sensitivity labels (e.g., CUI, Secret/No
  
  Forn).

• Security Clearance: Active Top‑Secret clearance with SCI eligibility (TS/SCI).
• Education: Master of Science (MS) in Cybersecurity, Computer Science, Mathematics (Cryptography focus), or a related technical field.
• Experience: 10+ years of related technical experience.
• DRM Expertise: 5+ years designing and administering Enterprise Digital Rights Management (EDRM) or Information Rights Management (IRM) systems, specifically Kiteworks
  , Microsoft Azure Information Protection (AIP/RMS), or Virtru
  .
• Encryption Standards: Deep understanding of cryptographic protocols (AES‑256, RSA), Public Key Infrastructure (PKI), and Key Management Service (KMS) operations.
• Policy Logic: Proven ability to design complex Attribute‑Based Access Control (ABAC) logic and Conditional Access policies.
• Cross‑Domain Knowledge: Understanding of how encryption travels across Cross‑Domain Solutions (CDS) and the challenges of key management in air‑gapped networks.
• Certification
  
  Required:
  
  CompTIA Security+ CE (or higher) to meet DoD 8570 IAT Level II requirements.

• Experience with Hardware Security Modules (HSM) (e.g., Thales, Entrust).
• Knowledge of NIST SP 800‑53 controls related to System and Information Integrity (SI) and Media Protection (MP).
• Experience integrating DRM tools with Sail Point for identity attribute consumption.
• Kiteworks Administrator Certification.

• Microsoft Information Protection Administrator (SC‑400).
• Certified Information Systems Security Professional (CISSP).

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.