Senior Microsoft Purview Engineer

Role overview A senior Microsoft Purview engineer is needed for a staff augmentation engagement expected to run six to twelve months, with the possibility of conversion to a full-time role. The position is hands-on and production-focused: from day one, the engineer will run and tune an active tenant, then gradually expand the data protection program and report on it to legal, compliance, and security leaders.

Responsibilities - Operate and tune Microsoft Purview in a live production environment, including sensitivity labels, DLP policies, retention, insider risk, and eDiscovery. - Mature and scale enterprise data protection capabilities by partnering with Security, Legal, Compliance, Privacy, IT, Data Governance, and business stakeholders. - Develop label taxonomies, configure auto-labeling, and roll out classification capabilities to end users. - Write and tune DLP policies across Exchange, SharePoint/OneDrive, Teams, and endpoints, and work the resulting alerts. - Build out additional data protection capabilities such as eDiscovery (Premium) and legal holds, insider risk or communication compliance, retention and records management, or DSPM-style discovery of sensitive data outside Microsoft 365. - Report on program status and improvements to legal, compliance, and security leadership over time.

Requirements - Minimum of seven years in IT security and at least five years in data protection. - Hands-on experience with sensitivity labels and classification, including label taxonomy design, auto-labeling, and user rollouts. - Practical experience with Microsoft Purview DLP across Exchange, SharePoint/OneDrive, Teams, and endpoints, including alert triage. - Working knowledge of Microsoft 365 security administration, including roles, RBAC, and Entra ID basics. - A track record of working directly with legal, compliance, privacy, or audit teams. - At least one additional area of depth in eDiscovery (Premium) and legal holds, Insider Risk Management or Communication Compliance, retention policies and records management (Data Lifecycle Management), or DSPM-style discovery across cloud, SaaS, and on-premises file shares.

Nice to have - Microsoft certifications such as SC-401 (Information Security Administrator), SC-400 (older version), SC-100, or SC-200.

Benefits and work setup - Pay rate of $80.00–$125.00 per hour, depending on experience. - Anticipated 40 hours per week with no travel required. - United States–based role; visa sponsorship is not available, and candidates must be authorized to work in the US.