eDiscovery Consultant

Convergenz; United States; On-site; USD 110,000 - 150,000; Full time

Job summary

Convergenz seeks a Purview eDiscovery & Data Collection Specialist to support a government customer. You will manage end-to-end eDiscovery across the Microsoft 365 tenant, execute mailbox extractions, and ensure defensible, auditable outcomes with complete chain-of-custody documentation.

Responsibilities include configuring Purview eDiscovery cases, collecting data from Exchange Online, SharePoint Online, OneDrive, and Teams, and coordinating with Legal, Compliance, Investigations, HR, and

Qualifications

• Hands-on eDiscovery and data collection in Microsoft Purview across Exchange Online, SharePoint Online, OneDrive, and Teams.
• Experience configuring Purview eDiscovery and Audit to automate custodian holds and defensible reporting.
• Demonstrated understanding of defensible collection practices, including legal holds, chain-of-custody, audit logging, and export documentation.

Responsibilities

• Create, configure, and manage Microsoft Purview eDiscovery cases with scope, data sources, and custodians.
• Identify custodians/sources across Exchange Online, SharePoint Online, OneDrive, and Teams per request requirements.
• Place and validate legal/litigation holds; document preservation actions for defensibility and auditability.
• Configure Purview eDiscovery and Audit to automate custodian holds, preserve immutable data, and maintain defensible reporting.
• Develop/optimize search criteria to improve precision/recall and reduce over-collection while meeting legal requirements.
• Execute mailbox extractions and content collections for authorized clients; coordinate OneDrive/SharePoint collections as needed.
• Enable review workflows by preparing review sets and securing access for stakeholders; support analytics and tagging.
• Export collected data in defensible formats with metadata; ensure chain-of-custody documentation and export details.
• Maintain complete chain-of-custody logs, including collection logs and export details (hashes/metadata).
• Manage intake/fulfillment of discovery requests via ticketing (ServiceNow); triage, prioritize, track, document to meet SLAs.
• Provide decryption support for S/MIME and RMS content when required for discovery activities.
• Support restoration of lost mailbox items in Office 365 when required and authorized.
• Produce status updates and operational reporting for stakeholders and leadership.
• Develop, update, and maintain SOPs; implement continuous improvements to quality and efficiency.
• Operate with confidentiality, security, and compliance in handling sensitive information.

Skills

eDiscovery

Microsoft Purview

Custodian holds

Ticketing (ServiceNow)

Stakeholder communication

Data collection

Auditable processes

Education

Microsoft Purview certifications (SC-400/SC-200/SC-300)

Security certifications (e.g., CompTIA Security+)

Tools

Purview eDiscovery

ServiceNow

Job description

We are seeking a Purview eDiscovery & Data Collection Specialist in support of our government customer. The Purview eDiscovery & Data Collection Specialist provides end-to-end support for legally defensible electronic discovery and data collections across the enterprise’s Microsoft 365 tenant. This role executes mailbox extractions and targeted collections for a wide range of Federal agency stakeholders, ensuring repeatable, auditable, and policy-compliant outcomes. The Specialist manages eDiscovery cases in Microsoft Purview, applies litigation/legal holds, performs advanced search and collection across M365 workloads, supports review workflows, and produces exports with complete chain-of-custody documentation

Responsibilities

• Create, configure, and manage Microsoft Purview eDiscovery cases, including defining scope, adding data sources, and managing custodians
• Identify and validate custodians and sources across Exchange Online, SharePoint Online, OneDrive, and Microsoft Teams in accordance with request requirements
• Place, manage, and validate legal/litigation holds to preserve relevant content; document preservation actions to support defensibility and auditability
• Configure Microsoft Purview eDiscovery and Audit to automate custodian legal holds, enforce immutable data preservation, and maintain defensible compliance reporting
• Develop, test, refine, and optimize search criteria (keywords, filters, and conditions) to improve precision/recall and reduce over-collection while meeting legal requirements
• Execute mailbox extractions and content collections for authorized clients using Purview capabilities and approved tools/methods; coordinate related OneDrive/SharePoint collections when required
• Enable and support review workflows by preparing review sets and providing secure access for stakeholders; support analytics, tagging/coding, and related review activities as needed
• Export collected data in legally defensible formats aligned to eDiscovery standards; ensure exports include appropriate metadata and documentation to support downstream processing and review
• Maintain complete chain-of-custody documentation, including collection logs, actions taken, and export details (e.g., hashes/metadata where applicable)
• Manage intake and fulfillment of discovery/data collection requests through the ticketing process (e.g., ServiceNow): triage, prioritize, track, and document work to meet service levels
• Provide decryption support for S/MIME and RMS-encrypted content when required for authorized discovery activities, ensuring outputs remain protected and access-controlled
• Support restoration of individual lost/missing mailbox items in the Office 365 cloud when required and authorized
• Produce status updates and operational reporting (searches, holds, collections, exports, and request metrics) for stakeholders and leadership as required
• Develop, update, and maintain SOPs and process documentation; recommend and implement continuous improvements to enhance quality, consistency, and efficiency
• Operate with strict confidentiality, security, and compliance discipline when handling sensitive information; adhere to organizational and federal privacy/security requirements

Qualifications

• Hands‑on experience performing eDiscovery and data collections in Microsoft Purview across Exchange Online, SharePoint Online, OneDrive, and Teams
• Experience configuring Microsoft Purview eDiscovery and Audit to automate custodian legal holds, enforce immutable data preservation, and maintain defensible compliance reporting
• Demonstrated understanding of defensible collection practices, including legal holds, chain-of-custody, audit logging, and export documentation
• Experience working in ticketed operations (preferably ServiceNow) with strong written documentation and SLA-based execution.
• Working knowledge of Microsoft 365 security and compliance concepts (retention/holds, auditing, and handling encrypted content such as S/MIME/RMS in discovery contexts)
• Ability to operate in a federal or highly regulated environment with strict privacy/security requirements and to communicate effectively with Legal, Compliance, Investigations, HR, and Security stakeholders
• Experience supporting high‑volume enterprise discovery operations (multiple concurrent cases/requests) and producing recurring metrics/status reporting
• Relevant Microsoft certifications (e.g., SC‑400, MS‑102, SC‑200/SC‑300, or equivalent)

A relevant security certification (e.g., CompTIA Security+ or equivalent)