Senior Data Protection Engineer (USSOCOM-Zero Trust, Azure Security & Network DLP) at Kentro
Tampa, FL
—
Jul 1, 2026
Tampa, FL
Jul 21, 2026
What this job asks for AI summary
A senior engineering role focused on data protection within a DoD Zero Trust program supporting USSOCOM. Day-to-day work centers on deploying and tuning Microsoft Purview, Defender XDR, and Trellix DLP tools, managing network data security controls, and integrating data protection with identity and access management systems across classified and unclassified hybrid environments. Suits an experienced cybersecurity professional with a TS/SCI clearance and a DoD 8570 IAT Level III certification.
Senior level · 10+ years · Tampa-St. Petersburg-Clearwater, FL · TS/SCI clearance · Full-time
“or” means any one of them counts — you don't need all of them.
We read this from the posting text with AI. Skim the description below before ruling yourself out.
How this req sits in the market our data
Most people in this occupation already list these. Still required — just not what gets you shortlisted.
What the occupation pays Median $121,586 (middle half $89,036–$154,361).
Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Jul 28, 2026. It is a model, not a headcount.
Why we read it this way (10)
The degree requirement states a Bachelor's in a relevant field but explicitly allows substitution with additional years of relevant experience per contract guidelines — treated as no hard degree gate.
The role requires 10+ years in cybersecurity/information assurance/data security engineering overall, and 5+ years specifically supporting DoD, IC, or Federal Government; the 10-year figure is used as the overall years minimum.
The DoD 8570/8140 IAT Level III certification is a hard gate; CISSP is listed as the primary option with CASP+, CCSP, and CISM as accepted alternatives — captured as a single skill with alternatives.
Trellix Network Prevent and Monitor are specific product capabilities within the Trellix DLP platform and are captured under the Trellix DLP skill rather than as separate entries.
KQL and Splunk SPL appear under 'Preferred Qualifications' and are marked accordingly.
Platform One and DevSecOps appear under 'Preferred Qualifications' as familiarity items.
No compensation figures are provided in the posting.
The role is hybrid in Tampa, FL — not fully remote.
Ignored 2 non-technology phrase(s) as skills (responsibilities/concepts, not named tools): Defender for Cloud Apps, NIST SP 800-207.
Requires a TS/SCI clearance — the cleared population is a small fraction of this occupation, so the real candidate pool is materially smaller than the estimate below, which does not model clearance.
Read the full posting
The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.