> Markdown version of [/jobs/ext/1730559-data-security-engineer-drm-specialist-senior](https://www.wearedevelopers.com/jobs/ext/1730559-data-security-engineer-drm-specialist-senior). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Data Security Engineer (DRM Specialist) - Senior,... - **Company:** Athenix Solutions Group, LLC - **Location:** Tampa, FL, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Microsoft Azure, CompTIA Security+, Cyber Security, Data Security, File Systems, Cryptographic Protocols, Federal Information Processing Standards (FIPS), Hardware Security Module, Information Systems Security Architecture Professional, Key Management, NIPRNet, Public Key Infrastructure, Zero Trust Network Access, RSA (Cryptosystem), Screenshots, Information Technology, SailPoint - **Published:** July 26, 2026 - **Apply:** https://www.juju.com/job/00000000gjqz5o ## About the Role + **Senior Level:** Master of Science (MS) degree in Cybersecurity, Computer Science, Mathematics (Cryptography focus), or a related technical field. Required Experience & Skills ("Must-Haves") + **Senior Level:** 10+ years of related technical experience. + **DRM Expertise:** Extensive hands-on experience (5+ years) designing and administering Enterprise Digital Rights Management (EDRM) or Information Rights Management (IRM) systems, specifically **Kiteworks** , **Microsoft Azure Information Protection (AIP/RMS)** , or **Virtru** . + **Encryption Standards:** Deep understanding of cryptographic protocols (AES-256, RSA), Public Key Infrastructure (PKI), and Key Management Service (KMS) operations. + **Policy Logic:** Proven ability to design complex Attribute-Based Access Control (ABAC) logic and Conditional Access policies. + **Cross-Domain Knowledge:** Understanding of how encryption travels across Cross-Domain Solutions (CDS) and the challenges of key management in air-gapped networks. Preferred Experience & Skills ("Nice-to-Haves") + Experience with **Hardware Security Modules (HSM)** (e.g., Thales, Entrust). + Knowledge of **NIST SP 800-53** controls related to System and Information Integrity (SI) and Media Protection (MP). + Experience integrating DRM tools with **SailPoint** for identity attribute consumption. + Kiteworks Administrator Certification. Certifications + **Required:** CompTIA Security+ CE (or higher) to meet DoD 8570 IAT Level II requirements. + **Preferred:** Microsoft Information Protection Administrator (SC-400). + **Preferred:** Certified Information Systems Security Professional (CISSP). ## Description Athenix Special Missions is seeking a **Data Security Engineer (DRM Specialist) - Senior, Zero Trust Program (USSOCOM)** in **MacDill Air Force Base (Tampa), Florida!** **_ASM Quality Policy:_** _To meet or exceed our customers' expectations for quality, delivery, and service through continual improvement, striving to meet our objectives, and committing to meeting all legal and statutory requirements_ Must be a U.S. Citizen Clearance Requirement: **Must have an Active DoD TS/SCI Clearance**, We seeking a highly specialized Data Security Engineer (DRM Specialist) to serve as the subject matter expert for encryption standards and Digital Rights Management (DRM) within the USSOCOM Zero Trust program. While other engineers handle general labeling, your role is to ensure that the data itself is mathematically protected and self-defending, regardless of where it travels. As the Senior DRM Specialist, you will be responsible for the configuration and enforcement of advanced encryption policies using **Kiteworks** (on SIPR and Top-Secret networks) and **Microsoft Purview Information Protection** (on NIPR). You will move the Command beyond simple file encryption to a granular, identity-aware protection model. You will design the "Data Policy Engine" rules that act as the Policy Decision Point (PDP), ensuring that a user's ability to decrypt a file is dynamically brokered in real-time based on their "Trust Attributes" (clearance, role, and risk level). You will also manage the complex Key Management lifecycles required to maintain a seamless user experience in a high-security, hybrid environment. Responsibilities + **Enterprise DRM Architecture:** Architect and configure the **Kiteworks Private Content Network** (SIPR/Top Secret) and **Microsoft Purview** (NIPR) to serve as the central Policy Decision Points (PDP) for file access. + **ABAC Policy Design:** Translate NIST 8112 metadata attributes into concrete DRM policies (e.g., "Allow View ONLY if User.Clearance >= TopSecret AND Device.State = Compliant"). + **Key Management:** Manage the lifecycle of encryption keys (Bring Your Own Key - BYOK, Customer Managed Keys) ensuring FIPS 140-2/3 compliance and availability across hybrid and air-gapped environments. + **Secure Collaboration:** Configure advanced DRM features such as **SafeVIEW** and **SafeEDIT** in Kiteworks to allow users to view and edit sensitive documents in a secure, containerized stream without the data ever leaving the controlled repository. + **Policy Enforcement:** Define and enforce "Rights Management" controls, specifically preventing actions like Copy/Paste, Screen Capture, and Printing for documents tagged with specific sensitivity labels (e.g., CUI, Secret/NoForn). ## Related Videos - [Let's get visual - Visual testing in your project](https://www.wearedevelopers.com/videos/303-let-s-get-visual-visual-testing-in-your-project) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Let's get visual - Visual testing in your project](https://www.wearedevelopers.com/videos/540-let-s-get-visual-visual-testing-in-your-project) - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [The Memory Leak That Ate Our Cluster: A Postmortem](https://www.wearedevelopers.com/videos/2057-the-memory-leak-that-ate-our-cluster-a-postmortem) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)