Microsoft Purview Engineer (Data Protection & AI Security)

Computing Concepts Inc; Hyderabad; On-site; INR 1,800,000 - 2,600,000; Full time

Job summary

Computing Concepts Inc. seeks a hands-on Microsoft Purview Engineer to build, operate, and harden data-protection and compliance controls across a Microsoft 365 E5 estate. You will own sensitivity labeling, DLP, retention, and eDiscovery, and drive DSPM for AI to govern data exposure to Copilot and other LLMs.

The role requires deep knowledge of Purview Data Map, SQL Server classifications, and scripting with PowerShell, with strong English communication and collaboration with global teams.

Qualifications

• Hands-on with Microsoft Purview and data protection controls across M365.
• Experience configuring DLP, retention, and eDiscovery in an E5 tenant.
• Knowledge of DSPM for AI data security and governance across LLM interactions.
• Ability to implement policy-as-configuration for structured and unstructured data.

Responsibilities

• Design, deploy, and tune sensitivity labels and DLP policies across Exchange, SharePoint, OneDrive, and Teams.
• Implement retention labels and disposition workflows aligned to regulatory obligations.
• Configure Insider Risk Management policies and Communication Compliance reviews.
• Deploy DSPM for AI to monitor data exposure to Copilot, ChatGPT, Claude, and other LLMs.
• Register and scan SQL Server sources in Purview Data Map and classify PII at column level.
• Monitor compliance alerts, automate operations with PowerShell, and document changes.

Skills

English communication

Security/compliance engineering

Cross-team collaboration

Education

SC-400 - Microsoft Information Protection and Compliance Administrator

SC-200 - Microsoft Security Operations Analyst

SC-300 - Microsoft Identity and Access Administrator

MS-102 - Microsoft 365 Administrator

AZ-500 - Microsoft Azure Security Engineer Associate

Tools

Microsoft Purview

PowerShell

SQL Server

T-SQL

Purview Data Map

Job description

Note : Shift Timings (6:30pm To 3:30am IST)

About the Role

Looking for a hands-on Microsoft Purview Engineer to build, operate, and continuously harden data-protection and compliance controls across a well-resourced Microsoft 365 E5 estate and structured data sources. This is a build-and-run engineering role at the intersection of traditional M365 compliance and emerging AI data security.

You will own end-to-end sensitivity labeling, DLP, retention, and eDiscovery across Microsoft 365 workloads; deploy and operate Data Security Posture Management for AI (DSPM for AI) to govern how sensitive data is exposed to Copilot, ChatGPT, Claude, and other LLMs; and drive PII discovery and classification in SQL Server through the Microsoft Purview Data Map. If you can turn a compliance requirement directly into working, policy-as-configuration controls across both unstructured and structured data, with minimal hand-holding this role is for you.

What You'll Do

Information Protection & DLP

Design, deploy, and tune sensitivity labels, label policies, auto-labeling, and encryption across Exchange, SharePoint, OneDrive, and Teams. Author and maintain DLP policies (including Endpoint DLP on Intune-managed devices), build and validate SITs, EDM schemas, and trainable classifiers, and reduce false positives through iterative tuning.

Data Lifecycle, Records & eDiscovery

Implement retention labels and policies, disposition-review workflows, and records-management controls aligned to regulatory and legal-hold obligations (HIPAA, PCI-DSS, GLBA, SEC/FINRA, or equivalent). Run eDiscovery (Standard & Premium), content search, and legal-hold workflows, supporting Legal and HR teams with collections, exports, and case management.

Insider Risk & Communication Compliance

Configure and triage Insider Risk Management policies in partnership with HR and Legal, and manage Communication Compliance reviews for policy and regulatory requirements.

DSPM for AI AI Data Security

Deploy and operate Microsoft Purview DSPM for AI to discover and monitor how sensitive data is exposed to Microsoft 365 Copilot, Copilot Studio agents, ChatGPT, Claude, and other generative-AI applications. Run oversharing and data-risk assessments, drive remediation through sensitivity labels, access reviews, and SharePoint Advanced Management, configure AI DLP and risky-interaction detection policies, and audit AI prompts and responses producing risk-posture reports for leadership.

Structured Data Discovery & Classification (SQL Server)

Register and scan SQL Server sources (on-premises via self-hosted integration runtime, and Azure SQL) in the Purview Data Map. Configure scan rule sets and schedules, classify PII at the column level, and tune built-in and custom classifiers for personal, financial, and health data. Profile and validate findings directly in SQL Server using T-SQL, bridge structured findings into M365 controls (e.g., EDM schemas that power DLP and auto-labeling), and maintain the data catalog, classifications, and lineage.

Operations, Governance & Automation

Monitor compliance alerts across the Purview portal and Microsoft Defender, maintain Compliance Manager assessments and audit evidence, automate recurring operations via Security & Compliance PowerShell and Microsoft Graph (Security API), and document architecture decisions, runbooks, and change records.

What We're Looking For

• 4+ years in security or compliance engineering, including 2+ years hands-on with Microsoft Purview (compliance and information-protection workloads).
• Production experience with sensitivity labels, DLP policies, and retention configurations in a Microsoft 365 E5 tenant.
• Working knowledge of the broader M365 security stack: Entra ID, Intune, Microsoft Defender for Endpoint, Defender for Cloud Apps, and Exchange Online.
• Proficiency with Security & Compliance PowerShell for scripting and automating compliance operations.
• Solid grasp of data-classification concepts SITs, EDM schemas, and trainable classifiers and how labeling and DLP behave across M365 services.
• Hands-on experience with the Microsoft Purview Data Map: registering and scanning SQL Server sources (including self-hosted integration runtime for on-premises), configuring scan rule sets, and classifying PII at the column level.
• Working T-SQL proficiency able to profile tables and columns, sample data, and validate PII findings directly in SQL Server.
• Experience with, or demonstrated readiness to operate, DSPM for AI including oversharing assessments, AI DLP policies, and AI interaction auditing.
• Ability to independently investigate compliance incidents and produce clear, audit-ready documentation.
• Reliable daily overlap with US Eastern business hours and strong written and verbal English for async and live collaboration with US teams.

Nice to Have

Technical

• Endpoint DLP at scale and DLP for Defender for Cloud Apps (non-Microsoft SaaS coverage).
• Microsoft 365 Copilot deployment/governance and SharePoint Advanced Management (restricted content discovery, site access reviews, restricted search).
• Insider Risk Management and Communication Compliance configuration.
• eDiscovery Premium workflows and legal-hold lifecycle operations.
• Data Map scanning beyond SQL Server: Azure SQL, Azure Storage, Microsoft Fabric, Snowflake, or multicloud sources.

Domain & Compliance

• Stronger structured-data background relational data modeling and profiling large tables for PII at scale.
• Microsoft Graph (Security API) automation; Logic Apps or Microsoft Sentinel integration.
• Exposure to regulated environments (HIPAA, PCI-DSS, GLBA, SEC/FINRA records retention, or equivalent).
• Data-lineage configuration and end-to-end Purview governance reporting.
• Experience designing or hardening Zero Trust data-access architectures in M365.

Certifications (Advantageous Not Required)

SC-400 - Microsoft Information Protection and Compliance Administrator

SC-200 - Microsoft Security Operations Analyst

SC-300 - Microsoft Identity and Access Administrator

MS-102 - Microsoft 365 Administrator

AZ-500 - Microsoft Azure Security Engineer Associate