Microsoft Information Protection (MIP) Engineer

Govcio LLC; Oregon; Hybrid; USD 125,000 - 150,000; Full time

Job summary

Govcio LLC is seeking a Microsoft Information Protection Engineer to design, implement, and optimize DLP and labeling strategies across Microsoft 365. You will safeguard CUI and enterprise data while enabling secure collaboration, reporting to security and compliance teams.

The ideal candidate has ~5 years' experience with Purview DLP, sensitivity labels, data classification, compliance monitoring, and policy enforcement in large environments.

Qualifications

• Approximately 5 years of experience implementing and supporting Microsoft Information Protection technologies.
• Experience administering: Microsoft Purview DLP, Microsoft Information Protection (MIP), Sensitivity Labels, Microsoft 365 Compliance and Security solutions.
• Experience supporting CUI or similar information classification programs.
• Experience developing and maintaining data protection policies and controls.
• Knowledge of Microsoft 365 security architecture and compliance capabilities.

Responsibilities

• Design, implement, maintain, and optimize Microsoft Purview DLP policies across Microsoft 365 services.
• Develop and tune DLP controls to protect sensitive organizational data from unauthorized disclosure, accidental sharing, or data exfiltration.
• Analyze emerging technologies, including Microsoft Copilot, to assess impacts on existing DLP controls and recommend security enhancements.
• Support implementation of DLP controls for new business applications and platforms.
• Perform policy testing, validation, and user acceptance activities prior to production deployment.
• Investigate and resolve DLP-related incidents, alerts, and user support requests.
• Collaborate with security, compliance, and business stakeholders to define and update DLP requirements.

Skills

DLP

Sensitivity Labels

Policy Enforcement

Data Classification

Incident Response

Education

Bachelor’s degree or equivalent in IT/Cybersecurity/CS

Tools

Microsoft Purview DLP

Microsoft Information Protection (MIP)

Power BI

Job description

The Microsoft Information Protection (MIP) Engineer will support enterprise data protection initiatives focused on Data Loss Prevention (DLP), Microsoft Purview Information Protection, Controlled Unclassified Information (CUI) compliance, and emerging AI security technologies such as Microsoft Copilot. This role is responsible for designing, implementing, maintaining, and enhancing information protection controls that safeguard sensitive agency data while enabling secure collaboration and productivity.

The ideal candidate will possess approximately five years of experience administering Microsoft information protection technologies, with demonstrated expertise in DLP, sensitivity labels, data classification, compliance monitoring, and security policy implementation within complex enterprise environments. This position is located in Washington, DC, and will be fully remote.

Responsibilities

Design, implement, maintain, and optimize Microsoft Purview DLP policies across Microsoft 365 services. Develop and tune DLP controls to protect sensitive organizational data from unauthorized disclosure, accidental sharing, or data exfiltration. Analyze emerging technologies, including Microsoft Copilot, to assess impacts on existing DLP controls and recommend appropriate security enhancements. Support implementation of DLP controls for new business applications and platforms. Perform policy testing, validation, and user acceptance activities prior to production deployment. Investigate and resolve DLP-related incidents, alerts, and user support requests. Conduct periodic reviews of DLP policies to ensure continued effectiveness and compliance with organizational requirements. Collaborate with security, compliance, and business stakeholders to define and update DLP requirements.

Key Responsibilities

Microsoft Information Protection / Sensitivity Labels (AIP)

Administer and enhance Microsoft Purview Information Protection and Sensitivity Label programs. Design and manage sensitivity label taxonomies supporting Controlled Unclassified Information (CUI) and other data classification requirements. Develop and implement labeling strategies to improve enterprise data visibility and protection. Evaluate new Microsoft Information Protection features and determine suitability for organizational deployment. Support automated and manual document classification initiatives across large-scale enterprise environments. Develop controls that integrate sensitivity labels with DLP policies and other security technologies. Assist with SharePoint Online and document library labeling implementations.

Additional Areas of Work

Microsoft Copilot Governance and AI Security. Evaluate Microsoft Copilot security capabilities and information protection controls. Develop strategies that leverage sensitivity labels and DLP policies to restrict access to sensitive information within Copilot prompts and responses. Assess risks related to AI-enabled information access and recommend mitigation approaches. Support deployment planning and governance activities related to enterprise AI initiatives.

Audit, Compliance, and Security Support

Support FISMA, OIG, and other compliance-related assessments. Assist in developing, testing, and deploying remediation efforts for audit findings. Create and maintain compliance evidence, system documentation, and security artifacts. Support development and testing of custom Sensitive Information Types (SITs) to meet organizational requirements. Collaborate with auditors, compliance personnel, and system owners during assessments and reviews. Contribute to NIST 800-53 control implementation and evidence collection activities.

Reporting and Analytics

Develop and maintain reporting solutions that provide visibility into DLP effectiveness, CUI adoption, and information protection trends. Create dashboards and metrics supporting executive and operational decision-making. Analyze security, labeling, and policy usage data to identify improvement opportunities. Support migration or modernization efforts associated with reporting platforms and analytics tools.

Stakeholder Engagement

Participate in regular meetings with customers, security teams, compliance personnel, and Microsoft representatives. Provide technical guidance and recommendations regarding information protection best practices. Support end-user adoption efforts through documentation, troubleshooting, and knowledge transfer.

Qualifications

• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or related field (or equivalent experience) with 9+ years (or commensurate experience).
• Required Skills and Experience: Approximately 5 years of experience implementing and supporting Microsoft Information Protection technologies.
• Experience administering: Microsoft Purview Data Loss Prevention (DLP), Microsoft Information Protection (MIP), Sensitivity Labels, Microsoft 365 Compliance and Security solutions.
• Experience supporting CUI or similar information classification programs.
• Experience developing and maintaining data protection policies and controls.
• Knowledge of Microsoft 365 security architecture and compliance capabilities.
• Experience supporting security audits, regulatory assessments, or compliance programs.
• Strong analytical and troubleshooting skills.
• Excellent written and verbal communication skills.
• Clearance Required: Must be able to attain and maintain EPA Public Trust.

Preferred Skills and Experience

• Microsoft security certifications such as: SC-400: Information Protection Administrator, SC-300: Identity and Access Administrator, SC-900: Security, Compliance, and Identity Fundamentals, AZ-104 or other Azure certifications.
• Experience supporting Microsoft Copilot governance, security, and compliance initiatives.
• Experience developing custom Sensitive Information Types (SITs).
• Familiarity with NIST 800-53, FISMA, and federal cybersecurity requirements.
• Experience with SharePoint Online information protection capabilities.
• Experience creating security dashboards and reporting solutions utilizing: Qlik, and /or Power BI, other enterprise reporting platforms.
• Experience supporting large-scale document classification and labeling initiatives involving millions of documents.
• ServiceNow administration or security integration experience.
• Experience supporting DLP or information protection requirements within ServiceNow environments.
• Experience with Azure NetApp Files and associated security, storage, or compliance controls.
• Clearance Required:

Posted Salary RangeUSD $125,000.00 - USD $150,000.00 /Yr.