Data Security Engineer (DRM Specialist)

Leidos

Quick summary

Work type: On-site
Location: MacDill Air Force Base, FL
Salary: $131,300–$237,350 / yr
Posted: 3 days ago

Market check

Salary context

Above market

How this pay compares to similar roles

Similar $160k

This role $184k

$104k most similar roles pay here $252k

This role pays more than 75% of similar roles. Most pay $135,000–$184,468 — the shaded band above. At the midpoint, this role pays about $184k versus about $160k for comparable roles.

Based on 240 similar postings.

Employer

About Leidos

Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations.

Leidos currently has 245 open roles on FindRole.

Listed pay typically runs $107,900–$195,050 across 235 roles with salary data.

Most-posted roles

View all roles at Leidos

At a glance

TL;DR · Data Security Engineer (DRM Specialist)

Apply Now Log in to save

Leidos seeks a Senior Data Security Engineer (DRM Specialist) to join the USSOCOM Zero Trust program as an encryption standards expert, responsible for configuring and enforcing advanced encryption policies using Kiteworks and Microsoft Purview Information Protection across SIPR and NIPR networks. This role involves designing granular DRM policies that dynamically broker file access based on user attributes like clearance level and device compliance, ensuring data remains mathematically protected regardless of its location. Key responsibilities include managing complex key lifecycles for FIPS 140-2/3 compliance in hybrid environments, configuring secure collaboration features such as SafeVIEW and SafeEDIT to prevent unauthorized actions on sensitive documents, and translating NIST metadata into concrete DRM policies. The ideal candidate holds a Master’s degree in Cybersecurity or related fields with extensive experience in EDRM systems like Kiteworks and Microsoft Azure Information Protection, along with deep knowledge of cryptographic protocols and ABAC logic design.

Skills

Kiteworks Microsoft Purview Information Protection ABAC NIST 8112 FIPS 140-2/3 AES-256 RSA PKI KMS Attribute-Based Access Control Conditional Access Cross-Domain Solutions HSM Thales Entrust NIST SP 800-53 SailPoint

What you'll do

Design and configure Kiteworks Private Content Network and Microsoft Purview as central Policy Decision Points (PDP).
Translate NIST 8112 metadata attributes into concrete DRM policies using Attribute-Based Access Control (ABAC) logic.
Manage encryption key lifecycles to ensure FIPS 140-2/3 compliance across hybrid environments.
Configure advanced DRM features like SafeVIEW and SafeEDIT in Kiteworks for secure document collaboration.
Define and enforce Rights Management controls to prevent unauthorized actions on sensitive documents.
Design complex ABAC logic and Conditional Access policies for granular, identity-aware data protection.

What we're looking for

Active Top-Secret clearance with SCI eligibility (TS/SCI).
Master’s degree in Cybersecurity, Computer Science, Mathematics (Cryptography focus), or related field.
10+ years of technical experience in cybersecurity or related fields.
Extensive hands-on DRM expertise with systems like Kiteworks and Microsoft Azure Information Protection.
Deep understanding of cryptographic protocols, PKI, and KMS operations.
Proven ability to design complex ABAC logic and Conditional Access policies.

Similar roles

Data Engineer

Booz Allen Hamilton

Honolulu, HI 11 days ago $77,600–$176,000

Palantir Foundry Pipeline Builder TypeScript Python Git CI/CD Agile SharePoint Dataverse Microsoft Power Platform DevSecOps software lifecycle methodologies

Save

Data Engineer

Booz Allen Hamilton

San Diego, CA 1 day ago $61,900–$141,000

Python AWS Git SQL Terraform Apache Spark AWS EMR Redshift SageMaker Databricks Linux CI/CD CloudFormation

Save

Data Engineer

Booz Allen Hamilton

Fayetteville, NC 15 days ago $77,500–$176,000

Python AWS CI/CD SQL Terraform S3 IAM EventBridge StepFunctions Lambda dbt Airflow NoSQL GraphDatabases DataWarehousing Agile Waterfall Iterative Spiral ApacheIceberg ZeroTrust ABAC

Save

Data Engineer

Equifax

St. Louis, MO 32 days ago

GCP BigQuery DataFlow DataProc Pub/Sub Cloud Functions Airflow Cloud Composer Vertex AI Python SQL Terraform Jenkins GitHub LangChain LlamaIndex CI/CD

Hybrid

Save

Data Engineer

Booz Allen Hamilton

Fort Belvoir, VA 32 days ago $77,600–$176,000

Python SQL Scala Java GitLab GitHub Bitbucket Spark Databricks Hadoop Hive AWS EMR Kafka MongoDB Cassandra AWS Redshift MySQL Snowflake

Save

Data Engineer

Booz Allen Hamilton

Bremerton, WA 32 days ago $77,600–$176,000

Python SQL Scala RDS Aurora DynamoDB Lambda EC2 SQS/SNS S3 IAM CloudFormation Step Functions Java UNIX/Linux Shell scripting Spark Databricks Hadoop Hive AWS EMR Kafka MongoDB Cassandra AWS Redshift MySQL Snowflake

Save