At Booz Allen Hamilton, the Data Security Engineer will design, deploy, and tune data protection solutions for DoD, IC, and civilian federal clients. This role centers on building Zero Trust architectures and aligning data-header guidelines with agency needs, while collaborating with stakeholders and engineering teams to implement data-control policies across hybrid cloud environments. Fort Meade, MD onsite.
Responsibilities
- Design, deploy, and manage data security solutions for DoD, IC, and civilian federal clients
- Develop architectures that meet client requirements in line with Zero Trust principles and IC data header guidelines
- Collaborate with agency personnel and internal delivery and engineering teams
- Help create custom data-control policies to ensure positive data control across hybrid cloud environments
Requirements
- 3+ years designing, deploying, configuring, and supporting enterprise data security solutions
- Experience implementing and administering Data Loss Prevention technologies such as Forcepoint, Trellix, Symantec, or Microsoft Purview
- Experience tuning and troubleshooting data protection policies and controls
- Experience integrating security solutions within complex enterprise environments
- Experience documenting and diagramming technical architectures
- Experience troubleshooting complex technical issues and delivering scalable engineering solutions
- Knowledge spanning cybersecurity, networking, operating systems, identity, cloud, and enterprise infrastructure
- Ability to evaluate, learn, and implement new security technologies and capabilities
- Secret clearance
- HS diploma or GED
Technologies
- Forcepoint
- Trellix
- Symantec
- Microsoft Purview
- Kubernetes
- Varonis
- BigID
- Virtru Data Security Platform (DSP)
- Keycloak
Benefits
- Health benefits
- Life benefits
- Disability benefits
- Financial benefits
- Retirement benefits
- Paid leave
- Professional development
- Tuition assistance
- Work-life programs
- Dependent care
NICE IF YOU HAVE
- Experience with Data Security Posture Management (DSPM) solutions such as Varonis, BigID, or similar technologies
- Experience in federal, DoD, or IC agency environments
- Experience managing and maintaining containerization technologies like Kubernetes
- Knowledge of federal information security policies, standards, directives, frameworks, and risk management processes
- Knowledge of Trusted Data Format (TDF) and Attribute-Based Access Control (ABAC)
- Knowledge of Virtru DSP and Keycloak
- Top Secret clearance
- Bachelor's degree in Information Technology, Cybersecurity, Engineering, or a related field
CLEARANCE
Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information. Secret clearance is required.
COMPENSATION
The projected compensation range for this position is $86,900.00 to $198,000.00 (annualized USD). Salary at Booz Allen is determined by various factors, including location, the individual’s education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. This posting will close within 90 days from the Posting Date.
IDENTITY STATEMENT
As part of the hiring process, you will complete an identity verification process that uses advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during interviews and assessments. Booz Allen reserves the right to take your picture to verify your identity and prevent fraud.
CANDIDATE AI USAGE POLICY
AI is a part of Booz Allen's daily work, and the company supports responsible use of AI tools. However, a fair candidate process based on your skills and knowledge is essential. The use of artificial intelligence or other tools to assist with responses during interviews is prohibited unless permission is explicitly provided.
WORK MODEL
- Remote: If listed as remote, there may still be occasions when you are required to work in person at a Booz Allen or customer facility.
- Hybrid: If listed as hybrid, you will be expected to work from a Booz Allen facility frequently, in alignment with leadership expectations and role needs. You may also be required to work from or visit a customer facility.
- Onsite: If listed as onsite, work will primarily be performed at a Booz Allen office or customer facility, with collaboration requirements as needed.
COMMITMENT TO NON-DISCRIMINATION
All qualified applicants will receive consideration for employment without regard to disability, protected veteran status, or any other status protected by applicable law.
