Senior Microsoft Purview Data Security Engineer

Roles and Responsibilities

• Design, implement, administer, and optimize enterprise Microsoft Purview architecture, governance models, policies, and operational processes.
• Serve as a technical SME for Purview DLP, Information Protection, Sensitivity Labels, Insider Risk Management, Records Management, DSPM, eDiscovery, Audit, and Compliance Manager.
• Configure and manage Sensitive Information Types (SITs), Exact Data Match (EDM), Trainable Classifiers, and data protection controls.
• Develop and enforce data protection policies across Exchange, SharePoint, Teams, endpoints, and other Microsoft 365 workloads.
• Design and implement data security and governance controls for Microsoft 365 Copilot and AI-enabled workloads.
• Extend data protection and governance capabilities across Azure and multi-cloud environments.
• Partner with Security Operations, Legal, Privacy, Compliance, and Cloud Engineering teams to translate regulatory requirements into technical controls.
• Integrate Microsoft Purview with Microsoft Defender XDR and Microsoft Sentinel to improve security monitoring and incident response.
• Develop PowerShell automation for Purview administration, policy management, reporting, and operational tasks.
• Create security posture reports and dashboards using Power BI.
• Conduct platform health checks, troubleshoot security and compliance issues, and continuously improve the data security posture.
• Establish deployment, change management, documentation, and operational governance standards for data security solutions.

Required Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or equivalent practical experience.
• 5+ years of information security engineering experience.
• 3+ years of hands-on Microsoft Purview implementation and administration experience.
• Strong experience implementing:
  • Microsoft Purview DLP
  • Information Protection and Sensitivity Labels
  • Sensitive Information Types (SITs)
  • Exact Data Match (EDM)
  • Trainable Classifiers
  • Insider Risk Management
  • Records Management
  • eDiscovery, Audit, and Compliance Manager
• Hands-on experience with Microsoft Defender for Endpoint, Microsoft Intune, and Microsoft 365 security.
• Strong PowerShell scripting and automation experience.
• Experience integrating Microsoft security and compliance technologies with Microsoft Sentinel and Defender XDR.
• Strong understanding of data protection, information governance, compliance, and security operations.
• Knowledge of security and compliance frameworks such as NIST, ISO 27001, and GDPR.
• Strong analytical, troubleshooting, communication, and stakeholder management skills.

Preferred Qualifications

• Experience with Microsoft Purview Data Map, Data Security Posture Management (DSPM), and enterprise data discovery/scanning.
• Experience securing and governing Microsoft 365 Copilot and AI-enabled technologies.
• Experience developing Power BI security and compliance dashboards.
• Strong knowledge of Zero Trust security principles.
• Familiarity with HIPAA, PCI-DSS, SOX, and CCPA requirements.
• Experience working in highly regulated or compliance-driven enterprise environments.