DSPM Architect

DSPM Architect
Remote

Top Skills:
1. DSPM
2. EKS deployments in AWS
3. AKS deployments in Azure

Job Summary
We are seeking a highly skilled DSPM Engineer to support the implementation, integration, and operationalization of Data Security Posture Management capabilities across cloud and SaaS environments. The ideal candidate will possess strong expertise in AWS and Azure cloud platforms, data security technologies, Microsoft security solutions, and cloud-native container services. The role will work closely with Cloud DevOps teams, application owners, and security stakeholders to onboard data sources, establish security policies, and enhance enterprise data visibility and protection. The position requires experience across AWS, Azure, Microsoft 365, Microsoft Purview, and Netskope DLP environments.

Key Responsibilities

DSPM Platform Integration & Deployment
Deploy, configure, and maintain Data Security Posture Management (DSPM) solutions across enterprise cloud environments.
Integrate DSPM platforms with data repositories hosted in AWS, Azure, and supported SaaS applications.
Partner with Cloud DevOps teams and application owners to onboard new data sources and ensure accurate data discovery and classification.
Troubleshoot integration and connectivity issues between DSPM platforms and enterprise systems.
Cloud Security & Container Platforms
Support DSPM integrations with Amazon Web Services (AWS), including Kubernetes workloads running on Amazon Elastic Kubernetes Service (EKS).
Support DSPM integrations within Microsoft Azure environments, including Azure Kubernetes Service (AKS).
Collaborate with cloud engineering teams to ensure secure onboarding of workloads and data repositories within cloud-native environments.
Assist in identifying and securing sensitive data across cloud storage services, containerized applications, and platform services.

Microsoft Security Solutions
Configure and maintain DSPM integrations with Microsoft 365 and Microsoft Entra ID.
Develop and manage Microsoft Purview policies for data classification, governance, and sensitive data protection.
Support data discovery, labeling, and compliance initiatives leveraging Microsoft security technologies.

Data Loss Prevention & Policy Management
Implement and maintain Netskope DLP integrations and policies.
Create and optimize data protection rules to identify, classify, and protect sensitive information.
Work with business and security stakeholders to enforce data security controls and compliance requirements.

Cross-Functional Collaboration
Partner with Cloud DevOps, Security Operations, Compliance, and Application teams to support data security initiatives.
Participate in architecture reviews and provide guidance on secure data onboarding and protection strategies.
Document implementation procedures, integration designs, and operational runbooks.
Support monitoring, reporting, and continuous improvement of DSPM processes and controls.

Required Qualifications
Bachelor's degree in Computer Science, Information Security, Information Technology, or a related field.
4+ years of experience in Cloud Security, Data Security, Security Engineering, or a related domain.
Hands-on experience with AWS services and EKS deployments.
Hands-on experience with Microsoft Azure and AKS deployments.
Experience integrating security platforms with Microsoft 365 and Microsoft Entra ID.
Experience configuring and managing Microsoft Purview policies and data governance capabilities.
Experience configuring Netskope DLP policies and integrations.
Understanding of data classification, data protection, DLP, and data governance concepts.
Experience working with Kubernetes-based environments and cloud-native architectures.
Strong troubleshooting, analytical, and stakeholder management skills.

Preferred Qualifications
Experience implementing or supporting DSPM solutions such as Cyera, BigID, Varonis, Wiz, Rubrik DSPM, Securiti.ai, or similar platforms.
Knowledge of cloud security frameworks and compliance requirements such as NIST, ISO 27001, HIPAA, SOX, or GDPR.
Experience with Infrastructure as Code (Terraform, CloudFormation, ARM/Bicep).
Relevant certifications such as:
o AWS Security Specialty
o AWS Solutions Architect Associate/Professional
o Microsoft Azure Security Engineer Associate (AZ-500)
o Microsoft Security, Compliance, and Identity certifications
o Certified Cloud Security Professional (CCSP)

Key Skills
Data Security Posture Management (DSPM)
AWS (EKS)
Microsoft Azure (AKS)
Microsoft 365
Microsoft Entra ID
Microsoft Purview
Netskope DLP
Kubernetes
Cloud Security
Data Protection & Governance
SaaS Security Integrations
Security Policy Management
Data Discovery & Classification
Stakeholder Collaboration