Senior Data Security Engineer (USSOCOM-Zero Trust, Azure Security & DLP)

Kentro - Tampa, FL

Hiring: Senior Data Security Engineer (USSOCOM-Zero Trust, Azure Security & DLP) Company: Kentro Location: Tampa, FL Job Posted Time: 2026-09-03 11:14:29 Employment Type: Hybrid Target Skills & Keywords : Azure, Encryption, S3, SQL, Spark, Splunk, Systems Engineering, Zero Trust About the job Experience: •10+ years of relevant experience in enterprise systems engineering, data security, or cybersecurity operations. Required Skills: •Azure Security & XDR: Architect and manage comprehensive Azure security solutions, serving as the primary lead for deploying and tuning Microsoft Purview and Microsoft Defender XDR across hybrid and classified environments. •Defender & Access Policy: Design and configure precise security policies within the Microsoft Defender suite, specifically leveraging Microsoft Purview, Microsoft Defender for Cloud Apps (MCAS), Entra ID, and Microsoft Conditional Access to control resource access based on identity, device compliance, and risk. •Trellix DLP Enforcement: Design, deploy, and enforce Trellix Full Data Loss Prevention (DLP) policies across endpoints and networks to stop unauthorized exfiltration of CUI and classified data without impacting mission performance. •Data Rights Management: Manage Active Directory Rights Management (AD-RMS) and Azure RMS as the primary DRM engines to enforce persistent, encryption-based protection of files and emails across USSOCOM networks. •Classification Tuning: Collaborate with mission owners to train classifiers and DLP rules to recognize unique USSOCOM data types (e.g., mission names, operational codes) and drastically reduce false positive rates in security alerts. •Azure Security Expert: Expert-level proficiency in Microsoft Azure security architecture, with a dedicated focus on implementing and managing Microsoft Purview and Microsoft Defender XDR. •Microsoft Purview (Sensitivity Labeling, DLP, Information Barrier policies). •Microsoft Defender for Cloud Apps (Cloud Access Security Broker - CASB policies). Qualifications: •Must be a US Citizen Compensation: •Flexible work environment (work from home / hybrid options) •Competitive benefits and rewards package Interested candidates, please apply directly through the job posting on company's career page or try via AI auto apply on this platform. Don't miss this opportunity to join a forward-thinking team!