Data Security Engineer (DRM Specialist)

Leidos is seeking a highly specialized Data Security Engineer (DRM Specialist) to serve as the subject matter expert for encryption standards and Digital Rights Management (DRM) within the USSOCOM Zero Trust program. While other engineers handle general labeling your role is to ensure that the data itself is mathematically protected and self-defending regardless of where it travels.

As the Senior DRM Specialist you will be responsible for the configuration and enforcement of advanced encryption policies using Kiteworks (on SIPR and Top-Secret networks) and Microsoft Purview Information Protection (on NIPR). You will move the Command beyond simple file encryption to a granular identity-aware protection model. You will design the Data Policy Engine rules that act as the Policy Decision Point (PDP) ensuring that a users ability to decrypt a file is dynamically brokered in real-time based on their Trust Attributes (clearance role and risk level). You will also manage the complex Key Management lifecycles required to maintain a seamless user experience in a high-security hybrid environment.

Responsibilities

• Enterprise DRM Architecture: Architect and configure the Kiteworks Private Content Network (SIPR/Top Secret) and Microsoft Purview (NIPR) to serve as the central Policy Decision Points (PDP) for file access.
• ABAC Policy Design: Translate NIST 8112 metadata attributes into concrete DRM policies (e.g. Allow View ONLY if > TopSecret AND Compliant).
• Key Management: Manage the lifecycle of encryption keys (Bring Your Own Key - BYOK Customer Managed Keys) ensuring FIPS 140-2/3 compliance and availability across hybrid and air-gapped environments.
• Secure Collaboration: Configure advanced DRM features such as SafeVIEW and SafeEDIT in Kiteworks to allow users to view and edit sensitive documents in a secure containerized stream without the data ever leaving the controlled repository.
• Policy Enforcement: Define and enforce Rights Management controls specifically preventing actions like Copy/Paste Screen Capture and Printing for documents tagged with specific sensitivity labels (e.g. CUI Secret/NoForn).

Qualifications

Security Clearance: Active Top-Secret clearance with SCI eligibility (TS/SCI).

Education: Master of Science (MS) degree in Cybersecurity Computer Science Mathematics (Cryptography focus) or a related technical field.

Experience: 10 years of related technical experience.

Required Experience & Skills:

• DRM Expertise: Extensive hands-on experience (5 years) designing and administering Enterprise Digital Rights Management (EDRM) or Information Rights Management (IRM) systems specifically Kiteworks Microsoft Azure Information Protection (AIP/RMS) or Virtru.
• Encryption Standards: Deep understanding of cryptographic protocols (AES-256 RSA) Public Key Infrastructure (PKI) and Key Management Service (KMS) operations.
• Policy Logic: Proven ability to design complex Attribute-Based Access Control (ABAC) logic and Conditional Access policies.
• Cross-Domain Knowledge: Understanding of how encryption travels across Cross-Domain Solutions (CDS) and the challenges of key management in air-gapped networks.
• Certification Required: CompTIA Security CE (or higher) to meet DoD 8570 IAT Level II requirements.

Preferred Qualifications:

• Experience with Hardware Security Modules (HSM) (e.g. Thales Entrust).
• Knowledge of NIST SP 800-53 controls related to System and Information Integrity (SI) and Media Protection (MP).
• Experience integrating DRM tools with SailPoint for identity attribute consumption.
• Kiteworks Administrator Certification.

Preferred Certifications:

• Microsoft Information Protection Administrator (SC-400).
• Certified Information Systems Security Professional (CISSP).

If youre looking for comfort keep scrolling. At Leidos we outthink outbuild and outpace the status quo because the mission demands it. Were not hiring followers. Were recruiting the ones who disrupt provoke and refuse to fail. Step 10 is ancient history. Were already at step 30 and moving faster than anyone else dares.

Original Posting:

Pay Range:

The Leidos pay range for this job level is a general guideline onlyand not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job education experience knowledge skills and abilities as well as internal equity alignment with market data applicable bargaining agreement (if any) or other law.