DLP Engineer III

Job Description

Everforth ECS is seeking a DLP Engineer III to work remotely .

At Everforth ECS Federal, we're driven by a commitment to excellence and innovation in solving complex challenges. As a premier provider of advanced technology solutions and services, our mission is to secure and optimize the most critical commercial, government, defense, and intelligence projects across the country. Our team is composed of dynamic professionals who thrive in a collaborative and empowering environment, where our team members leverage the latest technologies and insights to make a real-world impact. Join us and be part of a forward-thinking organization that values your expertise and supports your professional growth.

The DLP Engineer T3 is responsible for architecting, implementing, and optimizing comprehensive Data Loss Prevention (DLP) solutions across endpoints, networks, and cloud platforms that enable effective enterprise data protection and compliance operations. This role works closely with the Security Engineering teams, GRC teams, SOC analysts, enterprise IT teams, and client organizations to ensure the reliability, scalability, and operational effectiveness of DLP and CASB security capabilities. The DLP Engineer will serve as technical lead for enterprise clients, translate compliance requirements into scalable technical controls, and contribute to the continuous improvement of data protection technologies and automation initiatives that strengthen the organization's and clients' cybersecurity posture.

Responsibilities

• DLP Solution Architecture: Architect and engineer comprehensive DLP solutions across endpoints, networks, and cloud platforms, translating Governance, Risk, and Compliance (GRC) requirements into scalable technical controls for both internal teams and client organizations.
• Client Portfolio Management: Serve as technical lead for a diverse portfolio of enterprise clients, ensuring consistent delivery of DLP security capabilities and acting as trusted advisor for data protection strategies.
• Multi-Platform Administration: Configure, optimize, and maintain multi-vendor DLP and CASB platforms including Trellix DLP, Microsoft Purview, Zscaler DLP, Netskope, Skyhigh, and CrowdStrike AIDR/Device Control/Data Protection solutions.
• Policy & Rules Engineering: Design, implement, and fine-tune DLP rules, policies, and workflows while optimizing configurations to reduce false positives/negatives and ensure effective data protection across the organization.
• DLP Automation Development: Develop automation solutions for policy deployment, alert routing, workflow orchestration, and reporting to enhance operational efficiency and reduce manual intervention across DLP platforms.
• Client Engagement & Advisory: Act as technical advisor during client engagements, risk assessments, and solution design sessions, providing guidance on DLP strategy, architecture decisions, and tool integration while supporting pre-sales and scoping activities.
• Project Leadership: Lead and execute new client engagements and short-term project implementations.
• Tier-3 Incident Response: Provide Tier-3 support and hands-on technical assistance during cybersecurity incidents, assisting with investigations, resolution of DLP-related breaches, and configuration changes for both large-scale and localized security events.
• Platform Administration: Perform comprehensive system administration including upgrades, patches, performance monitoring, and deployment of agents and extensions to ensure optimal health and scalability of DLP and CASB platforms.
• Continuous Improvement & Innovation: Drive innovation by staying current on evolving DLP technologies, threat landscapes, and regulatory changes; recommend enhancements to existing frameworks, and maintain engineering documentation and SOPs.

Salary Range: $130,000 - $160,000

General Description of Benefits

Required Skills

• Experience: Minimum of 5-8 years of cybersecurity or security engineering experience supporting enterprise DLP and data protection environments.
• Operating Systems Proficiency: Experience with common operating systems including Windows and MacOS in enterprise environments.
• DLP Platform Experience: Hands-on configuration, tuning, and operation of multiple cybersecurity tools from vendors such as Microsoft Defender/Purview, Trellix ePO/DLP (SaaS or on-premises), Zscaler DLP, Skyhigh Security CASB/WebGateway, Netskope, DSPM solutions and related data protection platforms.
• Agent & Extension Deployment: Experience in deploying, upgrading agents and extensions across enterprise endpoints and infrastructure.
• Data Protection Knowledge: Strong understanding of data classification, encryption, and data protection technologies and methodologies.
• Analytical & Communication Skills: Excellent analytical, problem-solving, and communication skills with the ability to explain complex technical concepts to both technical and non-technical stakeholders.
• Project Management Abilities: Ability to work independently, prioritize tasks, and manage multiple projects simultaneously across diverse client environments.
• Microsoft Certification: Ability to obtain the Microsoft Certification SC-401 (Information Security Administrator Associate) within first 90 days of employment.

Other Requirements of the position include:

• Able and willing to obtain a US Security Clearance.
• On-Call Support: Participates in on-call support to assist with security incident response, operational issues, and investigation activities to maintain continuous SOC coverage and response capabilities.

Education Requirements

• Bachelor's degree in computer science, information security, or a related field. Will consider experience in lieu of a degree.

Desired Skills

• Policy Development Expertise: Demonstrated expertise in developing and implementing policies related to Sanctioned & Shadow IT discovery and management.
• Advanced DLP & CASB Solutions: Proficiency in at least one of the following DLP/CASB/DSPM solutions: Netskope, Zscaler, Varonis, or Skyhigh Security, including advanced configuration, tuning, and reporting capabilities.
• System Engineering Background: Strong background in system engineering and administration, ensuring system availability, integrity, and security across enterprise environments.
• Cloud Infrastructure Management: Experience with managing cloud infrastructure, particularly in Amazon Web Services (AWS) and Microsoft Azure environments.
• Email Security Platform Management: Proficiency in email platform management, ensuring email security, DLP integration, and reliability.
• Scripting & Automation: Proficient in scripting languages such as Python and PowerShell for automation, integration development, and enhanced security operations.
• DLP Certifications: Industry certifications such as Microsoft SC-401, Certified Information Privacy Professional (CIPP), Certified Information Systems Security Professional (CISSP), or vendor-specific DLP certifications.
• Regulatory Compliance Knowledge: Familiarity with data protection regulations and industry-specific compliance requirements.
• API Integration Experience: Experience integrating DLP platforms with SIEM, SOAR, ticketing systems, and other security orchestration tools.
• Client-Facing Experience: Proven track record of client engagement, technical advisory services, and successful project delivery in managed security services or consulting environments.

Physical Demands

• While performing the duties of this job, the employee is regularly required to sit at a desk and use a computer for extended periods.
• The position is generally sedentary but may require walking or standing for brief periods of time.
• Employee may occasionally be required to move, carry, push, pull and/or lift objects up to 10 pounds.

Work Environment

• Job is performed in an office place setting.
• The noise level in the work environment is generally very low with minimal background noise.
• Comfortable climate control and adequate lighting.

#EverforthECS1

ECS Federal LLC is an equal opportunity employer and does not discriminate or allow discrimination on the basis any characteristic protected by law. All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, or local jurisdiction law.

Everforth ECS is the federal segment of Everforth , a $4B global organization with over 10,000 employees . Our nearly 3,500 professionals deliver advanced technology solutions in data and AI, cybersecurity, and enterprise transformation, serving defense, intelligence, and federal civilian agencies.

Our work powers mission-critical outcomes, strengthens technology partnerships, and creates meaningful opportunities for our people. We are defined by a commitment to excellence in delivery, a culture of innovation, and an environment where talent can thrive and grow.

We value:

• Attracting and developing top talent and high-performing teams

• Fostering a culture that is engaging, accountable, and mission-driven

Meet the challenge. Make a difference with Everforth ECS!