> Markdown version of [/jobs/ext/2561261-cloud-security-engineer](https://www.wearedevelopers.com/jobs/ext/2561261-cloud-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cloud Security Engineer

- **Company:** Booz Allen Hamilton Inc.
- **Location:** Washington, DC, United States
- **Experience:** Expert
- **Salary:** $86,800.0 - $198,000.0
- **Contract:** Permanent contract
- **Skills:** Microsoft Access, Microsoft Windows, Audit Trail, Cloud Computing, Cloud Computing Security, Cloud Engineering, Collaborative Software, Data Governance, Identity and Access Management, Role-Based Access Control, Azure Active Directory, Zero Trust Network Access
- **Published:** August 11, 2026
- **Apply:** https://jobs.localjobnetwork.com/apply/add/87748556/1

## About the Role

* 7+ years of experience within the DoD
 * 7+ years of experience in enterprise information protection, data governance, or cloud security with tools such asMicrosoft 365 or Purview
 * Experiencedesigning and deployingsensitivity labels,SITs or EDM, andDLPacross M365 workloads and endpoints
 * Experience withMicrosoft Entra ID,RBAC, andConditional Access
 * Knowledge of eDiscovery, legal holds, advanced search, and audit log investigations
 * Top Secret clearance
 * Bachelor's degree
 * Security+ DoD 8570compliant Certification

Nice If You Have:

 * 3+ years of experience working with Microsoft Purview
 * Experience working within the U.S. Navy
 * Experience withretention of records,eDiscovery,audit, andinsider riskin regulated environments
 * Experience withPowerShellfor configuration, reporting, and automation beyond GUI capabilities
 * Experience building or managing the Microsoft Purview Data Map and scanning multicloud or onprem sources
 * Experience governing generative AI with Purview controls, including restricted access, labeldriven policies, and data boundary
 * Microsoft Certifications such as SC400,SC200,SC100,MS101,and AZ50 Certifications

## Description

As a Microsoft Purview Data Protection Engineer on our team, you'll design, implement, and optimize enterprise informationprotection, DLP, insider risk, and lifecyclegovernance controls across Microsoft 365. You'll partner with Navy mission stakeholders, cybersecurity teams, records managers, and cloud engineering teams to translate policy into technical enforcement mechanisms. You'll recommend tools, automations, and governance approaches based on your deep experience with Microsoft Purview, Entra ID, and IL5 or IL6 GovCloud requirements.

Your expertise will be vital as you build custom Sensitive Information Types (SITs), engineer retention and recordsmanagement policies, create insiderrisk detection controls, design labeldriven encryption, and implement DLP safeguards across endpoints and collaboration platforms. You'll strengthen your skills in automation, Purview compliance engineering, advanced audit or eDiscovery, and Microsoft Entra Conditional Access and identity governance, while mentoring tomorrow's cloudsecurity experts. Help us transform and secure our nation's warfighters with cloud technology and advanced Zero Trust capabilities.


## Related Videos

- [Resilient by Design: Building Robust Architectures in High-Stakes Financial Systems](https://www.wearedevelopers.com/videos/2106-resilient-by-design-building-robust-architectures-in-high-stakes-financial-systems)
- [Green Cloud Computing](https://www.wearedevelopers.com/videos/592-green-cloud-computing)
- [Data Governance in the Era of AI](https://www.wearedevelopers.com/videos/1622-data-governance-in-the-era-of-ai)
- [Hacking MSSQL on Cloud. All of them. How I became sysadmin on Azure, AWS, GCP and Alibaba.](https://www.wearedevelopers.com/videos/100339-hacking-mssql-on-cloud-all-of-them-how-i-became-sysadmin-on-azure-aws-gcp-and-alibaba)
- [No Keys for the Robot: GitOps as the Control Plane for Autonomous Agents](https://www.wearedevelopers.com/videos/100095-no-keys-for-the-robot-gitops-as-the-control-plane-for-autonomous-agents)
- [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see)

## Related Articles

- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)
- [Dev Digest 164: AI Agents, AI Blindspots and MCP security problems](https://www.wearedevelopers.com/magazine/578-dev-digest-164-ai-agents-ai-blindspots-and-mcp-security-problems)