BCG Federal is looking for a Data Protection Engineer to help operate and maintain data protection architecture across multiple GCC High platforms, including AWS, Microsoft Azure, and M365. This role focuses on aligning technical controls with requirements such as NIST 800-171, DFARS 7012, and CMMC Level 2, while evolving data classification, labeling, and egress monitoring for secure operations and emerging AI environments.
Role Overview
In this position, you will refine the technical strategy for data classification and labeling, translate compliance and contractual obligations into operational data schemas, and lead improvements alongside engineering and IT service teams. You will also collaborate with risk and security teams to define restrictive labeling approaches, and present data analysis and recommendations to senior stakeholders.
Responsibilities
- Enhance and maintain the Data Classification and labeling technical strategy in alignment with business, client, and compliance requirements
- Translate compliance and client contractual obligations into an operational data schema
- Collaborate with Engineering and IT Service teams to lead process improvements
- Partner with Risk and Security teams to define a restrictive labeling strategy
- Refine data protection process policies to align with security needs
- Present data analysis and recommendations to senior stakeholders
- Lead data-driven egress monitoring and controls evolutions
- Architect new data controls and strategy within emerging AI architecture
- Evolve security tools and reporting with embedded AI Security tools
- Collaborate with vendor technical teams to enable progress
- Use newer technologies to automate containment, isolation, and drive improved user behaviors
- Perform technical research on new challenges
Qualifications
- Experience leading a Data Protection technical strategy and guiding teams toward implementation across multiple platforms
- Ability to investigate new technologies and solutions and provide actionable recommendations to business stakeholders
- Comprehensive problem-solving skills to identify and resolve issues quickly
- Ability to work independently and as part of a virtual, geographically dispersed team with urgency
- Poise, tact, and patience when handling difficult or stressful situations while maintaining urgency
- Strong analytical skills with a detail-oriented, quality-minded approach
- Exceptional verbal and written communication and presentation skills
- Ability to manage alert triage staff and process
- Daily ownership of meaningful process improvement delivery
- 5-8+ years of experience in Information Security and Data Protection
- 3-5+ years of Data Protection technical operational capabilities and strategies
- Experience with data handling within AI tooling and management
- Proficiency in data classification and tracking strategies
- Familiarity with relevant industry standards and frameworks, including FedRAMP, NIST 800-171, and CMMC
- Encryption and Data Loss Prevention (DLP) experience using sensitivity labeling
- Excellent data analysis and presentation skills
- Ability to foresee and identify mitigation strategies for risks
- Knowledge of security issues, trends, and best practices
- Experience with Microsoft Azure, M365, Purview, Defender, Zscaler within a GCC High environment
- Ability to obtain and maintain a Security Clearance (if required)
Technology Stack
- AWS
- Microsoft Azure
- M365
- NIST 800-171
- DFARS 7012
- CMMC Level 2
- FedRAMP
- Purview
- Defender
- Zscaler
- Encryption
- Data Loss Prevention (DLP)
- Sensitivity labeling
- AI
Compensation
Salary range for US locations: USD 154,000 - 188,000 per year. Total compensation includes base salary, annual discretionary performance bonus, retirement contribution, and a market-leading benefits package. Bonus eligibility includes up to 20%, and retirement contributions start at 5% and move to 10% after 2 years.
Benefits
- $0 health insurance premiums for BCG employees, spouses, and children
- Low $10 copays for trips to the doctor, urgent care visits, and prescriptions for generic drugs
- Dental coverage, including up to $5,000 in orthodontia benefits
- Vision insurance with coverage for glasses and contact lenses annually
- Reimbursement for gym memberships and other fitness activities
- Fully vested Profit Sharing Retirement Fund contributions made annually, whether you contribute or not, plus an option to contribute to a 401(k) plan
- Paid Parental Leave and other family benefits such as elective egg freezing, surrogacy, and adoption reimbursement
- Generous paid time off including 12 holidays per year, an annual office closure between Christmas and New Years, and 15 vacation days per year (earned at 1.25 days per month)
- Paid sick time on an as needed basis
Location
Washington, DC (onsite). Locations listed: Washington | Boston.
