We are Generac, a leading energy technology company committed to powering a smarter world.
Over the 60 plus years of Generac’s history, we’ve been dedicated to energy innovation. From creating the home standby generator market category, to our current evolution into an energy technology solutions company, we continue to push new boundaries.
Major Responsibilities
Architecture & Roadmap:
Develop and maintain the enterprise data protection reference architecture and multi-year roadmap covering labeling/classification, DLP, insider risk, encryption, tokenization, secure collaboration, and data discovery.
Microsoft Purview Architecture:
Lead architecture, design, and configuration of Purview Information Protection (sensitivity labels, auto-labeling), Endpoint/Exchange/SharePoint/Teams/OneDrive DLP, Insider Risk, eDiscovery, and Records/Retention.
Establish policy hierarchies, tuning standards, and exception processes.
Multi-Vendor DLP & DSPM:
Evaluate, integrate, and/or rationalize additional data security controls (endpoint, network, CASB/SSE, DSPM) for non-Microsoft workloads and high-risk use cases — including platforms such as Varonis, Zscaler, and Cyera. Define control objectives, prevention vs. monitor modes, and rollout sequencing.
Lead technical evaluations, proof-of-concept design, and success criteria for candidate platforms, and design the integration pattern between DSPM discovery and classification outputs and downstream Purview labeling and DLP enforcement.
Enterprise Platform Security Architecture:
Design, document, and review data security controls for Generac’s key enterprise platforms, including Salesforce, SAP and SAP HANA, Databricks (including Unity Catalog), Windchill, Workday, and other business-critical SaaS, PaaS, and on-premises systems.
Define standard control patterns for access and entitlement models, encryption at rest and in transit, tokenization and masking, logging and monitoring, and data movement between source systems, the enterprise data platform, and downstream analytics, reporting, and AI workloads.
Apply heightened controls to sensitive worker, HR, and payroll data resident in Workday and its downstream integrations.
Serve as the data security architect on platform and integration projects, providing requirements and architectural sign-off through the data security review process.
API & Integration Data Security:
Define and maintain the security architecture for APIs, middleware, and data integration pipelines that move sensitive data between enterprise platforms, partners, and third parties.
Establish standards for API authentication and authorization (OAuth 2.0, mutual TLS, signed tokens, service principals), least-privilege scope design, secrets and key management, rate limiting and throttling, payload minimization, field-level masking and tokenization, and encryption in transit. Partner with Integration and Data Engineering teams to review API and pipeline designs for exposure of regulated or sensitive data, define logging and monitoring requirements for API traffic to support detection and investigation, and maintain an inventory of integrations that carry sensitive data along with their control posture.
Assess third-party and vendor API connections as part of the data security review process.
Data Lifecycle Governance:
Partner with Data Governance to map critical data elements, owners, systems, and flows.
Align labeling and retention schedules to regulatory and contractual obligations.
Secure Collaboration & External Sharing:
Design patterns for secure B2B/B2C collaboration, guest access, and conditional sharing with watermarking, encryption, and expiration.
Detection, Response, and Tuning:
Define incident workflows for DLP and insider risk alerts.
Calibrate rules to reduce false positives; implement KPIs and dashboards to measure efficacy and user friction.
Engineering & Automation:
Partner with M365/Azure engineering to implement at scale.
Use scripting and APIs (PowerShell/Graph) to…