The Data Security Engineer Journeyman protects sensitive data across enterprise data platforms in a highly regulated government environment, focusing on operational execution and continuous improvement of data protection controls. This role implements and maintains encryption, access controls, and monitoring capabilities to ensure compliant, secure handling of structured and unstructured data across the client environment. The engineer collaborates closely with governance, compliance, and engineering teams to conduct risk assessments, support audits, and enable secure data sharing and analytics use cases. Responsibilities include designing and implementing data security architectures with encryption for data at rest and in transit, tokenization, and key management using services such as KMS and HSMs; configuring and administering fine-grained access controls (RBAC/ABAC), identity federation, and privileged access management across databases, data lakes, and analytic platforms; developing and enforcing data classification schemes and handling procedures aligned to regulatory frameworks (e.g., NIST, FISMA, FedRAMP, HIPAA where appropriate); conducting data-centric risk assessments, threat modeling, and control validation for data stores, pipelines, and integrations; implementing, tuning, and maintaining data loss prevention (DLP), activity monitoring, and anomaly detection for structured and unstructured data assets; performing security reviews of data pipelines, APIs, and third-party data-sharing agreements to mitigate exfiltration and leakage risks; monitoring, investigatin

The Data Security Engineer Journeyman protects sensitive data across enterprise data platforms in a highly regulated government environment, focusing on operational execution and continuous improvement of data protection controls. This role implements and maintains encryption, access controls, and monitoring capabilities to ensure compliant, secure handling of structured and unstructured data across the client environment. The engineer collaborates closely with governance, compliance, and engineering teams to conduct risk assessments, support audits, and enable secure data sharing and analytics use cases. Responsibilities include designing and implementing data security architectures with encryption for data at rest and in transit, tokenization, and key management using services such as KMS and HSMs; configuring and administering fine-grained access controls (RBAC/ABAC), identity federation, and privileged access management across databases, data lakes, and analytic platforms; developing and enforcing data classification schemes and handling procedures aligned to regulatory frameworks (e.g., NIST, FISMA, FedRAMP, HIPAA where appropriate); conducting data-centric risk assessments, threat modeling, and control validation for data stores, pipelines, and integrations; implementing, tuning, and maintaining data loss prevention (DLP), activity monitoring, and anomaly detection for structured and unstructured data assets; performing security reviews of data pipelines, APIs, and third-party data-sharing agreements to mitigate exfiltration and leakage risks; monitoring, investigatin