Senior Microsoft Purview Data Security Engineer

2T Consulting; Williamstown (VT); On-site; USD 120,000 - 180,000; Full time

Job summary

2T Consulting is seeking an experienced Information Security Engineer to design, implement, and optimize Microsoft Purview across enterprise environments in the United States. You will serve as a technical SME for Purview components and partner with Legal, Privacy, and Cloud Engineering to translate regulatory requirements into controls.

The role focuses on governance, policy enforcement, and automation using PowerShell, with responsibilities spanning DLP, SITs, EDM, and integration with

Qualifications

• 5+ years of information security engineering experience.
• 3+ years of hands-on Microsoft Purview implementation and administration experience.
• Strong experience implementing:
• Microsoft Purview DLP
• Information Protection and Sensitivity Labels
• SITs
• EDM
• Trainable Classifiers
• Insider Risk Management
• Records Management
• eDiscovery, Audit, and Compliance Manager
• Hands-on experience with Microsoft Defender for Endpoint, Intune, and Microsoft 365 security.
• Strong PowerShell scripting and automation experience.
• Experience integrating Microsoft security and compliance technologies with Microsoft Sentinel and Defender XDR.
• Strong understanding of data protection, information governance, compliance, and security operations.
• Knowledge of security and compliance frameworks such as NIST, ISO 27001, and GDPR.
• Strong analytical, troubleshooting, communication, and stakeholder management skills.

Responsibilities

• Design, implement, administer, and optimize enterprise Microsoft Purview architecture, governance models, policies, and processes.
• Serve as a technical SME for Purview DLP, Information Protection, Sensitivity Labels, Insider Risk Management, Records Management, DSPM, eDiscovery, Audit, and Compliance Manager.
• Configure and manage SITs, EDM, Trainable Classifiers, and data protection controls.
• Develop and enforce data protection policies across Exchange, SharePoint, Teams, endpoints, and other Microsoft 365 workloads.
• Design and implement data security and governance controls for Microsoft 365 Copilot and AI-enabled workloads.
• Extend data protection and governance capabilities across Azure and multi-cloud environments.
• Partner with Security Operations, Legal, Privacy, Compliance, and Cloud Engineering teams to translate regulatory requirements into technical controls.
• Integrate Microsoft Purview with Microsoft Defender XDR and Microsoft Sentinel to improve security monitoring and incident response.
• Develop PowerShell automation for Purview administration, policy management, reporting, and operational tasks.
• Create security posture reports and dashboards using Power BI.
• Conduct platform health checks, troubleshoot security and compliance issues, and continuously improve the data security posture.
• Establish deployment, change management, documentation, and operational governance standards for data security solutions.

Skills

Microsoft Purview

Purview DLP

Information Protection

Sensitivity Labels

SITs

EDM

Trainable Classifiers

Insider Risk Management

Records Management

eDiscovery

Audit

Compliance Manager

PowerShell scripting

Automation

Data governance

Security operations

Analytical thinking

Stakeholder management

Communication skills

NIST

ISO 27001

GDPR

Education

Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or equivalent practical experience

Tools

Microsoft Defender for Endpoint

Intune

Microsoft 365 security

Microsoft Defender XDR

Microsoft Sentinel

PowerShell

Power BI

Job description

Roles and Responsibilities

• Design, implement, administer, and optimize enterprise Microsoft Purview architecture, governance models, policies, and operational processes.
• Serve as a technical SME for Purview DLP, Information Protection, Sensitivity Labels, Insider Risk Management, Records Management, DSPM, eDiscovery, Audit, and Compliance Manager.
• Configure and manage Sensitive Information Types (SITs), Exact Data Match (EDM), Trainable Classifiers, and data protection controls.
• Develop and enforce data protection policies across Exchange, SharePoint, Teams, endpoints, and other Microsoft 365 workloads.
• Design and implement data security and governance controls for Microsoft 365 Copilot and AI-enabled workloads.
• Extend data protection and governance capabilities across Azure and multi-cloud environments.
• Partner with Security Operations, Legal, Privacy, Compliance, and Cloud Engineering teams to translate regulatory requirements into technical controls.
• Integrate Microsoft Purview with Microsoft Defender XDR and Microsoft Sentinel to improve security monitoring and incident response.
• Develop PowerShell automation for Purview administration, policy management, reporting, and operational tasks.
• Create security posture reports and dashboards using Power BI.
• Conduct platform health checks, troubleshoot security and compliance issues, and continuously improve the data security posture.
• Establish deployment, change management, documentation, and operational governance standards for data security solutions.

Required Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or equivalent practical experience.
• 5+ years of information security engineering experience.
• 3+ years of hands-on Microsoft Purview implementation and administration experience.
• Strong experience implementing:
  • Microsoft Purview DLP
  • Information Protection and Sensitivity Labels
  • Sensitive Information Types (SITs)
  • Exact Data Match (EDM)
  • Trainable Classifiers
  • Insider Risk Management
  • Records Management
  • eDiscovery, Audit, and Compliance Manager
• Hands-on experience with Microsoft Defender for Endpoint, Microsoft Intune, and Microsoft 365 security.
• Strong PowerShell scripting and automation experience.
• Experience integrating Microsoft security and compliance technologies with Microsoft Sentinel and Defender XDR.
• Strong understanding of data protection, information governance, compliance, and security operations.
• Knowledge of security and compliance frameworks such as NIST, ISO 27001, and GDPR.
• Strong analytical, troubleshooting, communication, and stakeholder management skills.

Preferred Qualifications

• Experience with Microsoft Purview Data Map, Data Security Posture Management (DSPM), and enterprise data discovery/scanning.
• Experience securing and governing Microsoft 365 Copilot and AI-enabled technologies.
• Experience developing Power BI security and compliance dashboards.
• Strong knowledge of Zero Trust security principles.
• Familiarity with HIPAA, PCI-DSS, SOX, and CCPA requirements.
• Experience working in highly regulated or compliance-driven enterprise environments.