Sr. Cybersecurity Engineer

Role Summary

The Microsoft Purview Engineer will be responsible for designing, implementing, configuring, and operationalizing Microsoft Purview E5 capabilities across the enterprise. The role will focus on strengthening data protection, information governance, compliance monitoring, and insider risk management through Microsoft Purview solutions.

This position requires hands-on experience in implementing Microsoft Purview capabilities such as Data Loss Prevention, Information Protection, Sensitivity Labels, Data Lifecycle Management, Insider Risk Management, Communication Compliance, eDiscovery, Audit, and Compliance Manager. The role requires strong technical execution, documentation discipline, stakeholder collaboration, and the ability to design scalable data protection controls across Microsoft 365 environments.

Key Responsibilities

Microsoft Purview Implementation

• Lead end-to-end implementation of Microsoft Purview capabilities across Microsoft 365 workloads.

• Configure and manage Purview solutions for Exchange Online, SharePoint Online, OneDrive, Teams, and endpoint environments.

• Implement Data Loss Prevention policies for email, files, Teams, and endpoints.

• Configure sensitivity labels, label policies, encryption settings, and information protection controls.

• Implement automatic labeling, trainable classifiers, and advanced classification capabilities where applicable.

• Support implementation of Endpoint DLP and Teams DLP controls.

Data Protection and Information Governance

• Design and implement enterprise data protection controls to identify, classify, protect, monitor, and govern sensitive data.

• Configure data classification rules, sensitive information types, exact data match, and trainable classifiers.

• Support data discovery and classification across structured and unstructured data repositories.

• Implement data lifecycle management policies including retention labels, retention policies, and records management.

• Support data governance initiatives focused on reducing sensitive data exposure and improving visibility.

Compliance, Audit and Regulatory Support

• Configure Microsoft Purview Compliance Manager assessments and improvement actions.

• Support regulatory compliance requirements such as HIPAA, HITRUST, ISO 27001, SOC 2, SOX, GDPR, and PCI-DSS.

• Provide configuration evidence, audit logs, control documentation, and compliance reports for internal and external audits.

• Partner with GRC and audit teams to map Purview controls to compliance frameworks.

• Track control gaps, remediation actions, and compliance maturity improvements.

Insider Risk

• Configure and manage Microsoft Purview Insider Risk Management policies and workflows.

• Implement Communication Compliance policies for monitoring policy violations and sensitive communications.

• Ensure appropriate access controls and role-based permissions for compliance and investigation workflows.

Required Skills and Experience

• 5-8 years of experience in cybersecurity, compliance engineering, data protection, Microsoft 365 security, or information governance.

• Strong knowledge of Microsoft Purview Data Loss Prevention, Information Protection, Sensitivity Labels, and Data Lifecycle Management.

• Experience with Endpoint DLP, Teams DLP, Exchange Online DLP, SharePoint Online DLP, and OneDrive DLP.

• Experience configuring sensitive information types, exact data match, trainable classifiers, and auto-labeling policies.