Date Posted:2026-09-23
Country:United States of America
Location:US-PR-SANTA ISABEL-B1 ~ Felicia Industrial Park - St B1 ~ BLDG 1
Position Role Type:Remote
U.S. Citizen, U.S. Person, or Immigration Status Requirements:U.S. citizenship is required, as only U.S. citizens are authorized to access information under this program/contract.
Security Clearance: None/Not Required
The following position is to join our RTX Enterprise Services team in Santa Isabel, Puerto Rico:
The Data Loss Prevention (DLP) Administrator is a technical role responsible for the administration, engineering, troubleshooting, and operational support of the organization's DLP environment. Serving as a Level 3 technical escalation point, this role resolves complex DLP incidents, policy issues, endpoint enforcement challenges, and data protection requirements. The position partners closely with Cybersecurity, Security Operations, Endpoint, Identity, Messaging, Collaboration, Compliance, Privacy, and business teams to implement and maintain effective data protection controls across the environment. The role leads the day-to-day technical execution of the DLP program, including policy configuration, testing, deployment, monitoring, incident investigation, troubleshooting, tuning, and optimization. It also supports the full DLP lifecycle: Discover 12 Design 12 Test 12 Pilot 12 Deploy 12 Monitor 12 Tune 12 Recertify 12 Retire. The successful candidate will bring strong hands-on DLP experience and excellent troubleshooting skills, with the ability to translate security and compliance requirements into effective technical controls while minimizing unnecessary business disruption.
What You Will Do- Administer and maintain DLP policies, rules, alerts, notifications, enforcement actions, sensitive information types, classifiers, conditions, exceptions, thresholds, and policy actions.
- Configure and maintain DLP across Microsoft 365 workloads, including Exchange Online, SharePoint, OneDrive, Teams, and supported endpoint scenarios, including Endpoint DLP and associated device controls.
- Execute the DLP lifecycle: Discover 12 Design 12 Test 12 Pilot 12 Deploy 12 Monitor 12 Tune 12 Recertify 12 Retire, translating approved business and security requirements into effective technical controls.
- Build, test, pilot, deploy, and tune DLP policies based on incident trends, false positives, business feedback, and security requirements while following appropriate change controls.
- Serve as the primary Level 3 technical escalation point for complex DLP issues, including policy evaluation, conflicts, endpoint enforcement, exclusions, exceptions, alerts, notifications, and unexpected behavior.
- Monitor DLP health and effectiveness, investigate configuration and enforcement issues, and troubleshoot DLP behavior across Microsoft 365 workloads and managed endpoints.
- Follow change and release management processes, including implementation and rollback planning, testing, production coordination, and validation following Microsoft 365 service or organizational changes.
- Conduct periodic policy reviews and recertification, implement approved changes, and maintain accurate DLP configuration standards, administrative documentation, operational procedures, and change records.
- Develop and maintain troubleshooting procedures and knowledge articles, and establish clear roles and responsibilities across DLP engineering, operations, security operations, and business teams.
- Partner with application and data owners, Endpoint, Identity, Security Architecture, and other stakeholders to strengthen DLP controls and develop training and awareness programs that improve organizational understanding.
- This position will reference written work instructions for guidance with daily job activities. Work instructions are available in English only.
Qualifications You Must Have- A University Degree or equivalent experience and minimum 5 years prior relevant experience, or an Advanced Degree in a related field and minimum 3 years experience.
- 5+ years of experience in cybersecurity, information protection, data security, systems administration, or a related technical discipline.
- 3+ years of hands-on experience administering or engineering Microsoft Purview DLP or comparable enterprise DLP technology.
- Experience working with Microsoft 365 services and security/compliance capabilities.
- Experience administering DLP policies across multiple Microsoft 365 workloads.
- Experience investigating and troubleshooting DLP incidents and policy behavior.
- Experience with policy testing, deployment, monitoring, tuning, and troubleshooting.
- Experience with Microsoft Entra ID and enterprise identity concepts.
- Experience with endpoint management and Windows operating system security concepts.
- Experience using PowerShell for administration, troubleshooting, or automation.
Qualifications We Prefer- Advanced hands-on experience with Microsoft Purview DLP and Information Protection, including Sensitivity Labels, Insider Risk Management, Audit, eDiscovery, Data Lifecycle Management, sensitive information types, trainable classifiers, EDM, and advanced classification capabilities.
- Experience administering DLP across Microsoft 365 and endpoint environments, including Exchange Online, SharePoint, OneDrive, Teams, Microsoft 365 Copilot, Microsoft Defender for Endpoint, Endpoint DLP, and technologies such as Microsoft Intune or Configuration Manager.
- Strong experience with PowerShell and/or Microsoft Graph automation, including developing DLP dashboards, operational reports, metrics, and integrations with Microsoft Sentinel, SIEM, SOAR, or other security platforms.
- Strong troubleshooting experience across Microsoft 365 authentication, identity, endpoints, and applications, including determining root cause and working with Microsoft Support to resolve complex Purview and Microsoft 365 issues.
- Knowledge of data protection, Zero Trust, least privilege, identity and endpoint security, privacy, and regulatory requirements, including GDPR, CCPA/CPRA, HIPAA, PCI DSS, SOX, or similar requirements.
- Experience supporting complex or highly regulated enterprise environments and creating technical runbooks, SOPs, troubleshooting guides, and operational documentation.
- Experience mentoring junior analysts and serving as a technical escalation point, with strong analytical, problem-solving, written, and verbal communication skills.
- Ability to work independently and effectively across cybersecurity, infrastructure, compliance, privacy, and business teams to resolve complex issues and implement effective data protection solutions. Microsoft certifications in Security, Compliance, Identity, or Microsoft 365 are preferred.
What We OfferWhether you're just starting out on your career journey or are an experienced professional, we offer a robust total rewards package with compensation; healthcare, wellness, retirement and work/life benefits; career development and recognition programs. Some of the benefits we offer include parental (including paternal) leave, flexible work schedules, achievement awards, educational assistance and child/adult backup care.
Learn More & Apply Now!
Location: This position is remote.
However, the successful candidate must be currently living in Puerto Rico.Please consider the following role type definition as you apply for this role:
Remote: This position is currently designated as remote. Employees who are working in Remote roles will work primarily offsite (from home). The employee may be expected to travel to the Santa Isabel site location as needed.
