Device Pillar Security Lead - Hybrid/ Herndon, VA

Responsibilities will include but are not limited to:

• Data pillar strategy (30%): Own the agency's maturity baseline, KPIs and roadmap across all 8 data functions, and lead evidence-based assessments with system owners.
• Databricks governance (25%): Strengthen Unity Catalog access controls, tagging, lineage, encryption and audit, and move access from role-based to attribute-based (RBAC toward ABAC) with the CDO and data stewards.
• Zscaler DLP (30%): Design and tune DLP across web, endpoint, email, SaaS and GenAI. Migrate legacy rules, run monitor-then-enforce pilots, and connect alerts to Splunk and SOC playbooks.
• Compliance and delivery (15%): Map controls to NIST 800-53 and DHS 4300A, support ATO work, and brief government leaders.

What You’ll Need:

• Bachelor's degree in a related field (or 4 more years of experience in its place)
• 10+ years in IT or cybersecurity, including 5+ in data security, data governance or DLP
• Hands-on experience designing and tuning an enterprise DLP platform (Zscaler strongly preferred; Purview, Netskope, Forcepoint, Symantec or Palo Alto also count)
• Experience with data classification, PII/SPII handling, and federal frameworks (ZTMM, NIST 800-207/800-53, RMF/ATO)
• Strong writing skills and comfort briefing senior government leaders
• U.S. citizenship and the ability to obtain DHS Public Trust

Set Yourself Apart:

• Databricks, Snowflake or another lakehouse/data catalog platform
• DHS or USCIS experience
• Zscaler, Databricks, CISSP/CCSP or CDMP certifications
• A migration from a legacy DLP tool to SSE/SASE, or work with GenAI data controls or post-quantum cryptography.

Equal Employer/Veterans/Disabled

Navitas Business Consulting is an affirmative action and equal opportunity employer. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact Navitas Human Resources.