Microsoft Purview / DLP Security Engineer

Job Description

We are seeking a Microsoft Purview / DLP Security Engineer with strong hands-on experience in Microsoft Purview, Data Loss Prevention, security engineering, and automation. The ideal candidate will have experience implementing data protection and governance solutions across Microsoft 365 environments.

Responsibilities: Microsoft Purview Implementation

• Manage Microsoft Purview Information Protection, Data Lifecycle Management, and Insider Risk solutions.
• Configure sensitivity labels and auto-labeling policies.
• Support data discovery, classification, and governance initiatives.
• Extend Microsoft Purview capabilities to Microsoft Fabric environments.
• Integrate Purview with Microsoft Defender and SIEM tools.

Data Loss Prevention

• Design, implement, and maintain DLP policies across Microsoft 365 workloads.
• Investigate DLP alerts and coordinate remediation activities.
• Tune DLP policies to reduce false positives.
• Develop reporting dashboards, metrics, and compliance reports.
• Work with Endpoint DLP capabilities.

Engineering & Automation

• Develop automation frameworks for DLP lifecycle management.
• Write automation scripts using PowerShell, Python, and Microsoft Graph API.
• Implement infrastructure-as-code using ARM, Bicep, and/or Terraform.
• Build CI/CD pipelines for security and policy deployment.
• Automate alert triage and response workflows.
• Integrate security workflows with SOAR/SIEM platforms.
• Automate reporting and operational processes.

Governance & Compliance

• Align data protection policies with regulations such as GDPR and HIPAA.
• Support audits, compliance assessments, and data governance initiatives.
• Document security controls, procedures, policies, and operational processes.

• 5+ years of experience in security engineering, data protection, or a related field.
• Strong hands-on experience with Microsoft Purview and DLP.
• Experience with Microsoft Purview Information Protection, sensitivity labels, auto-labeling, and Insider Risk.
• Experience with Endpoint DLP.
• Strong scripting skills using PowerShell and Python.
• Experience with Microsoft Graph API or other API integrations.
• Knowledge of data governance frameworks.
• Experience with Microsoft Fabric is preferred.
• Experience with automation pipelines and Infrastructure as Code (IaC).
• Experience with CI/CD pipelines.
• Familiarity with SOAR/SIEM integrations.
• Familiarity with data platforms including data lakes and data warehouses.
• Knowledge of security, privacy, and compliance requirements such as GDPR and HIPAA.
• Strong troubleshooting, analytical, documentation, and communication skills.

This is a hands-on engineering role. Strong recent experience with Microsoft Purview and DLP is highly preferred.