Data Governance Technical Specialist

SPS Consulting, LLC•Leesburg, VA

4d•Hybrid

About The Position

We are seeking a technically skilled Data Classification & Remediation Specialist to support a critical information governance initiative aligned with the Department of Information Technology's Spring 2025 Charter on Data Remediation, Classification, and Transmission Policy Implementation. This role is focused on the full technical lifecycle of information - from classification and protection to retention, secure transmission, remediation, and defensible deletion. This position is hands-on and implementation-focused, with primary responsibilities centered around the application and enforcement of automated classification and data governance policies using tools such as Microsoft Purview, Varonis, and Quest Archive Shuttle. Working knowledge of eDiscovery processes and Microsoft Purview eDiscovery Manager is also important, particularly to support legal hold and content search workflows. This is not a leadership or management role at this stage, but it offers a growth path into more advanced enterprise-wide compliance and eDiscovery capabilities. The role also overlaps with Microsoft 365 engineering functions, requiring a strong grasp of Exchange Online and other core Microsoft 365 services. Familiarity with Microsoft Teams, SharePoint, OneDrive, Intune, and the Power Platform are valuable, along with an understanding of licensing compliance and application monitoring across Microsoft 365 environments.

Requirements

5+ years of experience in data governance, information protection, or IT security roles.
Strong technical skills in Varonis, Microsoft Purview, and MIP.
Experience with Quest Archive Manager and Archive Shuttle 11.5 migrations.
Experience administering Exchange Online, including mailbox and mail flow configuration.
Familiarity with Teams, SharePoint, OneDrive, Intune, and Power Platforms from a configuration or monitoring perspective.
Basic proficiency in PowerShell scripting for automation or batch tasks.
Knowledge of defensible deletion practices and long-term record preservation requirements.
Familiarity with hybrid identity environments using Active Directory and Azure AD.

Nice To Haves

Microsoft Certifications (e.g., SC-400, MS-500, AZ-104).
Experience with Power BI for technical reporting and reporting per DIT's broader needs.
Familiarity with Cayosoft for hybrid environment management.
Experience with Microsoft Purview eDiscovery Manager, particularly for legal hold or advanced search support.
Strong problem-solving skills and attention to detail in data handling and compliance operations.
Background in public sector or regulatory compliance environments a plus.

Responsibilities

Execute the Defensible Deletion Protocol (DDP), starting with email repository remediation, risk mitigation, and migration.
Decommission Quest Archive Manager and migrate email data from on-premises environments to Microsoft 365 using Quest Archive Shuttle 11.5.
Review current system and develop architecture, process, and documentation for migrating permanent hold email to cold storage.
Work with Public Affairs on communication plan for storing required attachments in One Drive and email deletion.
Conduct the Archiver Extraction, Migration, and Mitigation Project, including RIOT data analysis and secure deletion of sensitive data.
From the provided search criteria, identify and securely store permanent records in compliance with archival policy on a routine basis.
Implement and maintain classification schemas using Varonis and Microsoft Purview.
Apply automated sensitivity labels and protection settings to Microsoft 365 and Azure resources.
Configure Microsoft Information Protection (MIP) retention labels and policies.
Ensure technical enforcement of the Data Classification Policy, Data Transmission Policy (DIT-01-11), and legal/regulatory retention schedules.
Build workflows to be audit-ready so that real-time reporting can be generated for transparency, maintenance, and compliance.
Support litigation holds and case search workflows through Microsoft Purview eDiscovery Manager (Standard and Premium).
Scan and remediate non-compliant or overexposed content.
Apply defensible deletion processes consistent with regulatory and internal governance standards.
Draft and maintain technical SOPs for classification, scanning, labeling, and deletion.
Generate compliance and deletion reports using Power BI.
Apply classification and retention policies across both on-prem Active Directory and Azure AD environments.
Enforce access control and policy consistency across hybrid platforms.
Monitor service performance and outages using a consistent toolset across Microsoft 365 services.