Senior Data Security Engineer - DRM (TS/SCI) at Kentro
Tampa, FL
—
Jul 12, 2026
Tampa, FL
Jul 21, 2026
What this job asks for AI summary
A senior engineering role focused on data discovery, classification, and rights management as part of a Zero Trust initiative at a U.S. military command. The work centers on building a real-time inventory of sensitive and classified data across hybrid cloud and legacy environments, deploying AD-RMS and Azure RMS, and configuring the Microsoft Defender and Purview stack to enforce data protection policies. Suits a deeply experienced data security engineer with an active Top Secret/SCI clearance.
Senior level · 10+ years · Tampa-St. Petersburg-Clearwater, FL · Master's required · TS/SCI clearance · Full-time
“or” means any one of them counts — you don't need all of them.
We read this from the posting text with AI. Skim the description below before ruling yourself out.
How this req sits in the market our data
Rare in this occupation — lead with these, and say what you built with them.
Most people in this occupation already list these. Still required — just not what gets you shortlisted.
What the occupation pays Median $121,586 (middle half $89,036–$154,361).
Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Jul 28, 2026. It is a model, not a headcount.
Why we read it this way (8)
The clearance requirement is stated as 'Active Top-Secret clearance with SCI eligibility' — this is a hard gate and is classified as TS/SCI.
AD-RMS and Azure RMS are listed together as the primary DRM engine; they are treated as a paired requirement rather than strict alternatives, but are emitted as a pair with alternatives referencing each other since the JD presents them jointly.
SQL Server, Oracle, and PostgreSQL are listed together as database targets for unstructured data crawling; SQL Server is used as the primary name with Oracle and PostgreSQL as alternatives.
KQL (Kusto Query Language) and Splunk (SPL) appear under 'Preferred Technical Skills (A Plus)' and are marked as preferred accordingly. Microsoft Sentinel is noted as the context for KQL usage and is also marked preferred.
The role is hybrid (not fully remote) in Tampa, FL, supporting USSOCOM.
No compensation figures are provided in the posting.
Ignored 1 non-technology phrase(s) as skills (responsibilities/concepts, not named tools): Microsoft Defender for Cloud Apps.
Requires a TS/SCI clearance — the cleared population is a small fraction of this occupation, so the real candidate pool is materially smaller than the estimate below, which does not model clearance.
Read the full posting
The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.