Data Protection Engineer - Journeyman (USSOCOM/Zero Trust)

Kentro is hiring for a Journeyman Data Protection Engineer to support USSOCOM/EDAT - Zero Trust Data. The Journeyman Data Protection Engineer supports the implementation, administration, and optimization of enterprise data protection capabilities across Microsoft and Trellix security platforms. Working under the guidance of senior engineers and architects, this role assists in securing sensitive government data, implementing Data Loss Prevention (DLP) controls, supporting Zero Trust initiatives, and maintaining compliance with DoD cybersecurity requirements., * Azure Security & XDR: Support the deployment, configuration, and maintenance of Microsoft Purview and Microsoft Defender XDR solutions across cloud and hybrid enterprise environments. Assist with monitoring security alerts, investigating incidents, and implementing recommended security improvements.

• Defender Suite & Access Management: Assist in administering Microsoft Defender security services, Microsoft Purview, Defender for Cloud Apps, Microsoft Entra ID, and Conditional Access policies to protect enterprise resources and enforce identity-based security controls.
• Trellix DLP Administration:Configure, maintain, and troubleshoot Trellix Data Loss Prevention (DLP) policies to protect Controlled Unclassified Information (CUI) and other sensitive government data. Support policy tuning and incident response activities.
• Network Data Security: Support the operation and maintenance of Trellix Network Prevent and Monitor services. Assist with monitoring network traffic, investigating potential data exfiltration events, and implementing data protection controls.
• Datacenter & Hybrid Security: Assist in implementing and maintaining security controls protecting data moving between on-premises datacenters and cloud environments. Support encryption, secure communications, and network security initiatives.
• Zero Trust Implementation: Support the implementation of Zero Trust data protection capabilities aligned with DoD Zero Trust Architecture and NIST SP 800-207 guidance.
• Identity & Access Integration: Collaborate with Identity and ICAM teams to integrate data protection controls with identity services, including Attribute-Based Access Control (ABAC) and policy-based access management.
• Compliance & Continuous Monitoring: Assist with Continuous Authorization to Operate (cATO) activities by supporting security assessments, compliance validation, vulnerability remediation, and continuous monitoring of enterprise data security controls.
• Documentation & Operations: Develop technical documentation, standard operating procedures, security implementation guides, and engineering documentation. Participate in troubleshooting, change management, and operational support activities

• Education: Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Information Systems, Engineering, or a related field. Additional years of relevant experience may substitute for education in accordance with contract requirements.
• Experience: 3-7 years of experience in cybersecurity, information assurance, cloud security, or data protection engineering. Experience supporting DoD or Federal Government environments is preferred.
• Technical Skills: Microsoft Purview, Microsoft Defender XDR, Microsoft Defender for Cloud Apps, Microsoft Entra ID, Trellix Data Loss Prevention (DLP), data classification, encryption technologies, cloud security fundamentals, PowerShell or Python scripting, and security monitoring.
• Working knowledge of DoD Zero Trust Architecture, NIST SP 800-207, NIST Risk Management Framework (RMF), NIST SP 800-53, and DoD Controlled Unclassified Information (CUI) requirements.
• Required Certifications: Active DoD 8570/8140 IAT Level II certification (e.g., Security+ CE, CySA+, CCNA Security, or equivalent)., * Experience administering Microsoft Purview and Microsoft Defender security products.
• Familiarity with Trellix DLP administration and data protection technologies.
• Experience supporting USSOCOM, SOF, or other DoD organizations.
• Exposure to DevSecOps, Platform One, and Continuous ATO (cATO) concepts.
• Experience supporting cloud migration or hybrid cloud environments.
• Knowledge of Zero Trust principles and identity-based security models.
• Familiarity with Cross Domain Solutions (CDS) and classified data handling.
• Basic experience with Kusto Query Language (KQL) or Splunk Processing Language (SPL).
• Strong analytical, troubleshooting, and communication skills with the ability to work effectively within cross-functional engineering teams.

Clearance Requirement:

• Minimum Clearance - TS/SCI
• Must be a US Citizen

We offer competitive benefits package including paid time off, healthcare benefits, supplemental benefits, 401k including an employer match, discount perks, rewards, and more. We invest in our employees - Every employee is eligible for education reimbursement for certifications, degrees, or professional development. Reimbursement amounts may fluctuate due to IRS limitations. We want you to grow as an expert and a leader and offer flexibility for you to take a course, complete a certification, or other professional growth and networking. We are committed to supporting your curiosity and sustaining a culture that prioritizes commitment to continuous professional development.

By joining our supportive community, you will find that Kentro is dedicated to your personal and professional development. Together, we can drive meaningful change, spark innovation, and achieve extraordinary milestones., We believe in generating success collaboratively, enabling long-term mission success, and building trust for the next challenge. With you as our partner, let’s solve challenges, think innovatively, and maximize impact. As a valued member of our team, you have the unique opportunity to work in a diverse range of technology and business career paths, all while supporting our nation and delivering innovative technology solutions. We are a close community of experts that pride ourselves on creating an environment defined by teamwork, dedication, and excellence.

We hold three ISO certifications (27001:2013, 20000-1:2011, 9001:2015), two CMMI ML 3 ratings (DEV and SVC) and CMMC Level 2 Certification.

Industry Recognition

Commitment Equal Opportunity Employment & VEVRAA

Kentro is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state or local law.

Kentro is strongly committed to compliance with VEVRAA and other applicable federal, state, and local laws governing equal employment opportunity. We have developed comprehensive policies and procedures to ensure our hiring practices align with these requirements.

As part of our VEVRAA compliance efforts, Kentro has established an equal opportunity plan outlining our commitment to recruiting, hiring, and advancing protected veterans. This plan is regularly reviewed and updated to ensure its effectiveness.