Data Security Architect

We are Generac, a leading energy technology company committed to powering a smarter world.

Responsibilities

Develop and maintain the enterprise data protection reference architecture and multi-year roadmap covering labeling/classification, DLP, insider risk, encryption, tokenization, secure collaboration, and data discovery; lead architecture, design, and configuration of Microsoft Purview Information Protection, DLP, Insider Risk, eDiscovery, and Records/Retention; evaluate, integrate, and/or rationalize additional data security controls for non-Microsoft workloads; lead technical evaluations and proof-of-concept design for candidate platforms; design, document, and review data security controls for enterprise platforms including Salesforce, SAP and SAP HANA, Databricks, Windchill, and Workday; define security architecture for APIs, middleware, and data integration pipelines; partner with Data Governance to map critical data elements; design patterns for secure B2B/B2C collaboration and external sharing; define incident workflows for DLP and insider risk alerts; calibrate rules to reduce false positives; automate policy deployment and evidence collection using PowerShell and Graph; author and maintain security standards and reference patterns; translate regulatory and internal control requirements into technical policies; create enablement materials and lead pilots, UAT, and phased rollouts

Requirements

Bachelor's degree in Information Security, Computer Science, Information Systems, Data Science or related field, or equivalent experience; 7 years in Cybersecurity or IT, or a combination of 5 years' experience and relevant certification (Microsoft SC-400, SC-100/SC-200, CISSP, CIPT or CDPSE); 3 years of hands-on experience in Microsoft Purview / Information Protection / DLP, DSPM, or other enterprise data security platforms; experience designing incident workflows, reporting, and KPI dashboards for DLP/insider risk; hands-on experience with at least one additional DLP/SSE/CASB, DSPM, or endpoint DLP platform (Varonis, Zscaler, Cyera, Symantec/Broadcom, CS Falcon, Forcepoint, Netskope, Skyhigh/Trellix, Proofpoint, Microsoft Defender for Endpoint DLP), including evaluation, proof-of-concept, and integration with a native Microsoft data protection stack; expertise with Microsoft Purview (sensitivity labels/auto-labeling, Endpoint/M365 DLP, Insider Risk, eDiscovery, Records/Retention); demonstrated data security architecture skills, including diagramming complex data flows, developing technical requirements, and authoring architecture specifications; strong understanding of data classification, encryption/IRM, data discovery, and data lifecycle management across M365, SaaS, IaaS, and on-premises environments; solid grasp of identity-centric and zero-trust concepts (Conditional Access, device compliance, least privilege); demonstrated ability to architect and review data security controls for major enterprise business platforms (Salesforce, SAP / SAP HANA, Databricks, Windchill, Workday, or comparable); working knowledge of API and integration security (OAuth 2.0, mutual TLS, service principals, least-privilege scope design, secrets and key management, payload minimization, field-level masking or tokenization, logging and monitoring); proficiency with PowerShell and Microsoft Graph; ability to collaborate with Legal/Privacy/Compliance; excellent verbal and written communication skills