Remote MIP Engineer: DLP, Purview & CUI Compliance

GovCIO; Salem (OR); Remote; USD 125,000 - 150,000; Full time

Job summary

GovCIO is seeking a Microsoft Information Protection Engineer to design, implement, and manage DLP and labeling across Microsoft 365 for protecting agency data while enabling secure collaboration. The role emphasizes CUI compliance and integrating AI security controls.

The candidate should have about 5 years of hands-on experience with Microsoft information protection technologies, DLP, Purview, and sensitivity labels, plus a 9+ year IT background.

Qualifications

• Bachelor’s degree or higher in Information Technology, Cybersecurity, Computer Science, or related field with 9+ years (or commensurate experience).
• Approximately 5 years of experience implementing and supporting Microsoft Information Protection technologies.
• Experience administering Microsoft Purview DLP, MIP, and Sensitivity Labels.
• Experience administering Microsoft 365 Compliance and Security solutions.
• Experience supporting CUI or similar information classification programs.
• Experience developing and maintaining data protection policies and controls.
• Knowledge of Microsoft 365 security architecture and compliance capabilities.
• Experience supporting security audits, regulatory assessments, or compliance programs.
• Strong analytical and troubleshooting skills.
• Excellent written and verbal communication skills.

Responsibilities

• Design, implement, maintain, and optimize Microsoft Purview DLP policies across Microsoft 365 services.
• Develop and tune DLP controls to protect sensitive organizational data from disclosure or exfiltration.
• Analyze emerging technologies, including Microsoft Copilot, for impacts on DLP controls.
• Support implementation of DLP controls for new business applications and platforms.
• Perform policy testing, validation, and user acceptance activities prior to deployment.
• Investigate and resolve DLP-related incidents, alerts, and user requests.
• Conduct periodic reviews of DLP policies for ongoing effectiveness and compliance.
• Collaborate with security, compliance, and business stakeholders to define DLP requirements.
• Administer and enhance Microsoft Purview Information Protection and Sensitivity Label programs.
• Design and manage sensitivity label taxonomies supporting CUI and data classification requirements.
• Develop labeling strategies to improve data visibility and protection.
• Evaluate new Microsoft Information Protection features and deployment suitability.
• Support automated and manual document classification at scale.
• Develop controls that integrate sensitivity labels with DLP policies and other security tools.
• Assist with SharePoint Online labeling implementations.
• Evaluate Copilot security capabilities and information protection controls.
• Develop strategies to restrict Copilot prompt access to sensitive information.
• Assess AI-related risks and mitigation approaches.
• Support deployment planning and governance for enterprise AI initiatives.
• Support FISMA, OIG and other compliance assessments.
• Assist in remediation efforts for audit findings and create security artifacts.
• Collaborate with auditors and system owners during assessments and reviews.
• Contribute to NIST 800-53 control implementation and evidence collection.

Skills

DLP implementation

MIP (Microsoft Information Protection)

Sensitivity labels

CUI classification

Security policy development

Audit/compliance

Communication skills

Education

Bachelor’s degree or higher in IT / cybersecurity, 9+ years experience

Tools

Microsoft Purview

SharePoint Online

Power BI

Qlik

ServiceNow

NIST 800-53

Job description

GovCIO is seeking a Microsoft Information Protection Engineer to design, implement, and manage DLP and labeling across Microsoft 365 for protecting agency data while enabling secure collaboration. The role emphasizes CUI compliance and integrating AI security controls.

The candidate should have about 5 years of hands-on experience with Microsoft information protection technologies, DLP, Purview, and sensitivity labels, plus a 9+ year IT background.