Senior DSPM Architect - Remote / Telecommute

Job Title: Senior DSPM Architect - Remote / Telecommute

Job Location: Foster City, CA

Job Type: Contract

Job Overview:

We are seeking a highly skilled DSPM Engineer to support the implementation, integration, and operationalization of Data Security Posture Management capabilities across cloud and SaaS environments. The ideal candidate will possess strong expertise in AWS and Azure cloud platforms, data security technologies, Microsoft security solutions, and cloud-native container services. The role will work closely with Cloud DevOps teams, application owners, and security stakeholders to onboard data sources, establish security policies, and enhance enterprise data visibility and protection. The position requires experience across AWS, Azure, Microsoft 365, Microsoft Purview, and Netskope DLP environments.

Responsibilities:

• Deploy, configure, and maintain Data Security Posture Management (DSPM) solutions across enterprise cloud environments.
• Integrate DSPM platforms with data repositories hosted in AWS, Azure, and supported SaaS applications.
• Partner with Cloud DevOps teams and application owners to onboard new data sources and ensure accurate data discovery and classification.
• Troubleshoot integration and connectivity issues between DSPM platforms and enterprise systems.
• Support DSPM integrations with Amazon Web Services (AWS), including Kubernetes workloads running on Amazon Elastic Kubernetes Service (EKS).
• Support DSPM integrations within Microsoft Azure environments, including Azure Kubernetes Service (AKS).
• Collaborate with cloud engineering teams to ensure secure onboarding of workloads and data repositories within cloud-native environments.
• Assist in identifying and securing sensitive data across cloud storage services, containerized applications, and platform services.
• Configure and maintain DSPM integrations with Microsoft 365 and Microsoft Entra ID.
• Develop and manage Microsoft Purview policies for data classification, governance, and sensitive data protection.
• Support data discovery, labeling, and compliance initiatives leveraging Microsoft security technologies.
• Implement and maintain Netskope DLP integrations and policies.
• Create and optimize data protection rules to identify, classify, and protect sensitive information.
• Work with business and security stakeholders to enforce data security controls and compliance requirements.
• Partner with Cloud DevOps, Security Operations, Compliance, and Application teams to support data security initiatives.
• Participate in architecture reviews and provide guidance on secure data onboarding and protection strategies.
• Document implementation procedures, integration designs, and operational runbooks.
• Support monitoring, reporting, and continuous improvement of DSPM processes and controls.

Requirements:

• Bachelor s degree in Computer Science, Information Security, Information Technology, or a related field.
• 4+ years of experience in Cloud Security, Data Security, Security Engineering, or a related domain.
• Hands-on experience with AWS services and EKS deployments.
• Hands-on experience with Microsoft Azure and AKS deployments.
• Experience integrating security platforms with Microsoft 365 and Microsoft Entra ID.
• Experience configuring and managing Microsoft Purview policies and data governance capabilities.
• Experience configuring Netskope DLP policies and integrations.
• Understanding of data classification, data protection, DLP, and data governance concepts.
• Experience working with Kubernetes-based environments and cloud-native architectures.
• Strong troubleshooting, analytical, and stakeholder management skills.

Preferred Qualifications:

• Experience implementing or supporting DSPM solutions such as Cyera, BigID, Varonis, Wiz, Rubrik DSPM, Securiti.ai, or similar platforms.
• Knowledge of cloud security frameworks and compliance requirements such as NIST, ISO 27001, HIPAA, SOX, or GDPR.
• Experience with Infrastructure as Code (Terraform, CloudFormation, ARM/Bicep).
• Relevant certifications such as AWS Security Specialty, AWS Solutions Architect Associate/Professional, Microsoft Azure Security Engineer Associate (AZ-500), Microsoft Security, Compliance, and Identity certifications, and Certified Cloud Security Professional (CCSP).

Key Skills:

• Data Security Posture Management (DSPM).
• AWS (EKS).
• Microsoft Azure (AKS).
• Microsoft 365.
• Microsoft Entra ID.
• Microsoft Purview.
• Netskope DLP.
• Kubernetes.
• Cloud Security.
• Data Protection & Governance.
• SaaS Security Integrations.
• Security Policy Management.
• Data Discovery & Classification.
• Stakeholder Collaboration.

====

• Medical, Dental, and Vision Insurance
• 401(k) Retirement Plan
• Health Savings Account (HSA)
• Disability Insurance (Short-Term and Long-Term)
• Life and AD&D Insurance
• Paid Sick Leave (where required by applicable state or local law)
• Supplemental Insurance Plans
• Identity Theft Protection
• Pet Insurance
• Employee Wellness Programs
• Employee Assistance Program (EAP)
• Career Growth and Professional Development Opportunities