At Booz Allen Hamilton, the Data Security Engineer will design, deploy, and tune data protection solutions for DoD, IC, and civilian federal clients. This role centers on building Zero Trust architectures and aligning data-header guidelines with agency needs, while collaborating with stakeholders and engineering teams to implement data-control policies across hybrid cloud environments. Fort Meade, MD onsite.

Responsibilities

Design, deploy, and manage data security solutions for DoD, IC, and civilian federal clients
Develop architectures that meet client requirements in line with Zero Trust principles and IC data header guidelines
Collaborate with agency personnel and internal delivery and engineering teams
Help create custom data-control policies to ensure positive data control across hybrid cloud environments

Requirements

3+ years designing, deploying, configuring, and supporting enterprise data security solutions
Experience implementing and administering Data Loss Prevention technologies such as Forcepoint, Trellix, Symantec, or Microsoft Purview
Experience tuning and troubleshooting data protection policies and controls
Experience integrating security solutions within complex enterprise environments
Experience documenting and diagramming technical architectures
Experience troubleshooting complex technical issues and delivering scalable engineering solutions
Knowledge spanning cybersecurity, networking, operating systems, identity, cloud, and enterprise infrastructure
Ability to evaluate, learn, and implement new security technologies and capabilities
Secret clearance
HS diploma or GED

Technologies

Forcepoint
Trellix
Symantec
Microsoft Purview
Kubernetes
Varonis
BigID
Virtru Data Security Platform (DSP)
Keycloak

Benefits

Health benefits
Life benefits
Disability benefits
Financial benefits
Retirement benefits
Paid leave
Professional development
Tuition assistance
Work-life programs
Dependent care

NICE IF YOU HAVE

Experience with Data Security Posture Management (DSPM) solutions such as Varonis, BigID, or similar technologies
Experience in federal, DoD, or IC agency environments
Experience managing and maintaining containerization technologies like Kubernetes
Knowledge of federal information security policies, standards, directives, frameworks, and risk management processes
Knowledge of Trusted Data Format (TDF) and Attribute-Based Access Control (ABAC)
Knowledge of Virtru DSP and Keycloak
Top Secret clearance
Bachelor's degree in Information Technology, Cybersecurity, Engineering, or a related field

CLEARANCE

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information. Secret clearance is required.

COMPENSATION

The projected compensation range for this position is $86,900.00 to $198,000.00 (annualized USD). Salary at Booz Allen is determined by various factors, including location, the individual’s education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. This posting will close within 90 days from the Posting Date.

IDENTITY STATEMENT

As part of the hiring process, you will complete an identity verification process that uses advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during interviews and assessments. Booz Allen reserves the right to take your picture to verify your identity and prevent fraud.

CANDIDATE AI USAGE POLICY

AI is a part of Booz Allen's daily work, and the company supports responsible use of AI tools. However, a fair candidate process based on your skills and knowledge is essential. The use of artificial intelligence or other tools to assist with responses during interviews is prohibited unless permission is explicitly provided.

WORK MODEL

Remote: If listed as remote, there may still be occasions when you are required to work in person at a Booz Allen or customer facility.
Hybrid: If listed as hybrid, you will be expected to work from a Booz Allen facility frequently, in alignment with leadership expectations and role needs. You may also be required to work from or visit a customer facility.
Onsite: If listed as onsite, work will primarily be performed at a Booz Allen office or customer facility, with collaboration requirements as needed.

COMMITMENT TO NON-DISCRIMINATION

All qualified applicants will receive consideration for employment without regard to disability, protected veteran status, or any other status protected by applicable law.

Data Security Engineer

Job Description