Barbaricum is seeking a Senior Data Security Engineer (DRM Specialist) to support a Zero Trust cybersecurity initiative for U.S. Special Operations Command (USSOCOM). This role will serve as the technical subject matter expert for Digital Rights Management (DRM), encryption policy enforcement, and data-centric security architecture across classified and unclassified environments.
The selected candidate will design and implement attribute-based encryption and rights management policies to ensure sensitive data remains protected regardless of location or transport. This position plays a critical role in integrating identity attributes, data classification, and encryption technologies to enable dynamic, policy-driven access control across the enterprise.
Responsibilities:
- Architect and configure enterprise DRM platforms including Kiteworks Private Content Network and Microsoft Purview Information Protection.
- Design and implement Attribute-Based Access Control (ABAC) policies to enforce dynamic access decisions based on user clearance, role, and device trust posture.
- Manage the lifecycle of encryption keys and cryptographic infrastructure, including Bring Your Own Key (BYOK) and customer-managed key models.
- Implement advanced secure collaboration capabilities allowing controlled viewing and editing of sensitive documents.
- Configure rights management policies restricting unauthorized actions such as copy, printing, screen capture, or external sharing.
- Integrate DRM platforms with identity systems and data classification tools to ensure consistent policy enforcement.
- Support operations across hybrid and air-gapped classified networks.
Required Qualifications:
- Active DoD Top Secret clearance with SCI eligibility.
- Master's degree in Cybersecurity, Computer Science, Mathematics, or related technical field.
- 10+ years of relevant cybersecurity or data protection experience.
- Extensive experience implementing enterprise Digital Rights Management (EDRM) or Information Rights Management (IRM) solutions.
- Strong knowledge of cryptographic protocols and standards (AES-256, RSA, PKI).
- Experience designing and implementing Attribute-Based Access Control (ABAC) policies.
- Experience supporting cross-domain or classified network environments.
Preferred Qualifications:
- Experience with Hardware Security Modules (HSM) such as Thales or Entrust.
- Knowledge of NIST SP 800-53 security controls.
- Experience integrating DRM platforms with identity governance solutions such as SailPoint.
- Kiteworks administrator certification.
Required Certifications:
- CompTIA Security+ CE (DoD 8570 IAT Level II)
Preferred Certifications:
- Microsoft Information Protection Administrator (SC-400)
- Certified Information Systems Security Professional (CISSP)