Lead M365 Purview Engineer

Orcapod Consulting Services; Bengaluru; Hybrid; INR 800,000 - 1,600,000; Full time

Job summary

Orcapod Consulting Services seeks a Lead M365 Security Engineer to architect, deploy, and manage a comprehensive M365 data protection ecosystem in a cloud-first environment.

You will unify compliance requirements with technical enforcement, build global Purview strategies across Exchange, SharePoint, OneDrive, Teams, and endpoints, and mentor junior engineers while handling advanced incident response.

Qualifications

• Experience in designing security architecture for Microsoft 365 and data protection.
• Ability to mentor engineering teams and lead security incident response.
• Strong collaboration with Legal, HR, and Risk teams.

Responsibilities

• Design and implement a global Purview strategy across the M365 stack.
• Develop, configure and manage sensitivity labels and auto-labeling policies.
• Engineer DLP policies to protect PII/PHI and IP while maintaining user productivity.
• Govern policies by translating business intent into technical controls.
• Oversee eDiscovery workflows and Insider Risk Management alerts.
• Act as Tier 3 escalation for security incidents and mentor junior engineers.

Skills

Security architecture

Mentorship

Cross-functional collaboration

Tools

Purview Information Protection

Purview DLP

PowerShell scripting

Microsoft Sentinel

Job description

Role Overview

We are seeking a seasoned Lead M365 Security Engineer to architect, deploy, and manage our M365 data protection ecosystem. You will be the technical authority on how we classify, label, and protect sensitive information across the M365 stack & Extended services. This role bridges the gap between high-level compliance requirements and technical enforcement, ensuring our data remains secure in a cloud-first environment.

Key Responsibilities

• Architecture & Strategy: Design and implement a global Microsoft Purview (formerly Compliance Center) strategy, focusing on the integration of Information Protection and DLP across Exchange, SharePoint, OneDrive, Teams, Endpoints & supported services.
• Information Protection (AIP/MIP): Develop, configure & Manage sensitivity label schemas, auto-labeling policies & all relevant Information protection configuration across Portals & CLI[Admin]
• Data Loss Prevention (DLP): Engineer complex DLP policies to prevent unauthorized exfiltration of PII, PHI, and IP, balancing security with user productivity.
• Policy Governance: Collaborate with Legal, HR, and Risk teams to translate business "intent" into technical "controls."
• Discovery & Response: Manage eDiscovery (Standard/Premium) workflows and oversee Insider Risk Management alerts to identify high-risk user behaviors.
• Mentorship: Act as the Tier 3 escalation point for security incidents and mentor junior engineers on the nuances of the M365 security landscape.

Required Technical Skills Category

Core M365 Security

Microsoft Purview Information Protection , Purview Message Encryption ( PME), DLP

Governance

Records Management, Retention Policies, Data Lifecycle Management.

Identity & Access

Entra ID (Azure AD), Conditional Access, Privileged Identity Management (PIM).

Automation

Advanced PowerShell scripting for bulk policy deployment and reporting.

Cloud Ecosystem

Integration of M365 security logs with Microsoft Sentinel or third - party SIEMs.