Senior Microsoft Purview Data Security Engineer

2T Consulting; Washington; On-site; USD 130,000 - 185,000; Full time

Job summary

2T Consulting is seeking a Senior Information Security Engineer to lead enterprise Microsoft Purview governance and security across Microsoft 365 workloads and multi-cloud environments. You will implement policies, configure SITs/EDM, and integrate Purview with Defender XDR and Sentinel, while collaborating with Security Operations, Legal, Privacy, and Cloud Engineering teams.

The role requires 5+ years in information security engineering, 3+ years of Purview experience, and strong scripting

Qualifications

• Minimum 5+ years in information security engineering.
• 3+ years hands-on Purview implementation/administration.
• Experience with DLP, Information Protection, SITs and EDM.
• Knowledge of regulatory frameworks (NIST, ISO 27001, GDPR).
• Strong scripting and automation capabilities with PowerShell.

Responsibilities

• Design, implement, administer, and optimize Purview architecture and governance.
• Serve as SME for Purview DLP, Information Protection, SITs, EDM, eDiscovery, Audit.
• Configure SITs, EDM, trainable classifiers, and data protection controls.
• Develop and enforce data protection policies across M365 workloads.
• Integrate Purview with Defender XDR, Sentinel; support incident response.
• Create security posture dashboards with Power BI; automate tasks with PowerShell.
• Collaborate with Security Ops, Legal, Privacy, Compliance, Cloud teams.

Skills

PowerShell scripting

Automation

Analytical thinking

Troubleshooting

Stakeholder management

Communication

Education

Bachelor’s degree in Cybersecurity / Computer Science / Information Technology

Tools

Microsoft Purview

Microsoft Defender for Endpoint

Microsoft Intune

Microsoft 365 security

Power BI

Azure / multi-cloud

Microsoft Sentinel

Defender XDR

Job description

Roles and Responsibilities

• Design, implement, administer, and optimize enterprise Microsoft Purview architecture, governance models, policies, and operational processes.
• Serve as a technical SME for Purview DLP, Information Protection, Sensitivity Labels, Insider Risk Management, Records Management, DSPM, eDiscovery, Audit, and Compliance Manager.
• Configure and manage Sensitive Information Types (SITs), Exact Data Match (EDM), Trainable Classifiers, and data protection controls.
• Develop and enforce data protection policies across Exchange, SharePoint, Teams, endpoints, and other Microsoft 365 workloads.
• Design and implement data security and governance controls for Microsoft 365 Copilot and AI-enabled workloads.
• Extend data protection and governance capabilities across Azure and multi-cloud environments.
• Partner with Security Operations, Legal, Privacy, Compliance, and Cloud Engineering teams to translate regulatory requirements into technical controls.
• Integrate Microsoft Purview with Microsoft Defender XDR and Microsoft Sentinel to improve security monitoring and incident response.
• Develop PowerShell automation for Purview administration, policy management, reporting, and operational tasks.
• Create security posture reports and dashboards using Power BI.
• Conduct platform health checks, troubleshoot security and compliance issues, and continuously improve the data security posture.
• Establish deployment, change management, documentation, and operational governance standards for data security solutions.

Required Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or equivalent practical experience.
• 5+ years of information security engineering experience.
• 3+ years of hands-on Microsoft Purview implementation and administration experience.
• Strong experience implementing:
  • Microsoft Purview DLP
  • Information Protection and Sensitivity Labels
  • Sensitive Information Types (SITs)
  • Exact Data Match (EDM)
  • Trainable Classifiers
  • Insider Risk Management
  • Records Management
  • eDiscovery, Audit, and Compliance Manager
• Hands-on experience with Microsoft Defender for Endpoint, Microsoft Intune, and Microsoft 365 security.
• Strong PowerShell scripting and automation experience.
• Experience integrating Microsoft security and compliance technologies with Microsoft Sentinel and Defender XDR.
• Strong understanding of data protection, information governance, compliance, and security operations.
• Knowledge of security and compliance frameworks such as NIST, ISO 27001, and GDPR.
• Strong analytical, troubleshooting, communication, and stakeholder management skills.

Preferred Qualifications

• Experience with Microsoft Purview Data Map, Data Security Posture Management (DSPM), and enterprise data discovery/scanning.
• Experience securing and governing Microsoft 365 Copilot and AI-enabled technologies.
• Experience developing Power BI security and compliance dashboards.
• Strong knowledge of Zero Trust security principles.
• Familiarity with HIPAA, PCI-DSS, SOX, and CCPA requirements.
• Experience working in highly regulated or compliance-driven enterprise environments.