Microsoft Purview Engineer

Cynet Systems•Reston, VA

About The Position

The Microsoft Purview Engineer designs, implements, configures, and operates enterprise data security, information protection, compliance, and data governance solutions using Microsoft Purview. The role translates enterprise data protection and governance requirements into scalable technical solutions across Microsoft Fabric, Azure, cloud, endpoint, and enterprise data environments. It partners with cybersecurity, data, cloud, Fabric, Microsoft 365, architecture, legal and compliance, application, and business teams to protect sensitive information while enabling secure data use, analytics, Microsoft Fabric, and enterprise AI adoption. The engineer develops and supports Purview capabilities for information protection, sensitivity labeling, Data Loss Prevention (DLP), data classification, Data Security Posture Management, Data Map, Unified Catalog, and information lifecycle requirements. The role supports secure enterprise AI adoption by addressing sensitive-data exposure and oversharing risks, developing reusable data-protection patterns, and evaluating approved Purview capabilities for enterprise architecture. It also provides technical leadership, documentation, monitoring, troubleshooting, and coordination across application and platform teams.

Requirements

Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Data Engineering, or a related discipline, or equivalent relevant experience.
At least 6 years of relevant experience.
Strong hands-on experience with Microsoft Purview, Microsoft Fabric, Microsoft 365 security and compliance technologies, data governance, or enterprise data security.
Demonstrated Azure, Purview, and Fabric/OneLake experience.
Advanced hands-on expertise implementing Microsoft Purview solutions in large enterprise environments.
Ability to independently design complex Purview solutions and translate security, governance, and compliance requirements into technical architectures.
Experience with Microsoft Fabric, OneLake, Azure Data Lake, Azure SQL, and related enterprise data platforms.
Experience implementing or supporting Information Protection, sensitivity labels, DLP, data classification, retention, or related capabilities.
Strong understanding of Microsoft Azure, Microsoft Fabric, and Microsoft 365.
Ability to lead technical initiatives, solution designs, implementation patterns, and production deployments.
Ability to mentor engineers and establish engineering standards and implementation practices.
Ability to evaluate emerging Purview capabilities and recommend enterprise adoption approaches.
Experience troubleshooting complex enterprise security or data-governance configurations.
Understanding of data governance, privacy, security, and information lifecycle concepts.
Strong analytical, documentation, communication, and stakeholder-management skills.
Ability to lead complex technical workstreams and coordinate delivery with multiple application and platform teams.
Demonstrated technical leadership across multidisciplinary teams.

Nice To Haves

Microsoft Purview implementation experience in a large global enterprise.
Experience with Microsoft Entra ID and Azure security.
Experience with PowerShell, APIs, scripting, and configuration automation.
Experience with enterprise data catalogs, metadata management, lineage, and governance.
Experience with DLP, sensitivity labels, retention policies, eDiscovery, Insider Risk Management, and Data Security Posture Management.
Knowledge of cybersecurity frameworks and regulatory or compliance requirements relevant to large enterprises.
Experience securing data used by generative AI, Microsoft 365 Copilot, retrieval-augmented generation applications, or enterprise AI agents.
Relevant Microsoft security, compliance, Azure, or data certifications.
Microsoft Certified: Fabric Analytics Engineer Associate.
Microsoft Certified: Information Security Administrator Associate.
Microsoft Azure certification.
CISSP, CCSP, or CISM.

Responsibilities

Design, configure, deploy, and support Microsoft Purview capabilities across enterprise environments.
Engineer information protection, sensitivity labeling, DLP, data classification, and data security posture management solutions.
Configure sensitive information types, classifiers, labels, policies, and related data protection controls in Microsoft Fabric.
Develop and maintain enterprise standards, configurations, operating procedures, and support documentation.
Troubleshoot complex Purview configuration, policy, integration, and operational issues.
Automate repeatable administration, monitoring, and engineering activities where appropriate.
Design and implement DLP policies for Microsoft Fabric and other supported enterprise environments.
Implement and maintain enterprise sensitivity labels and information-protection policies in Microsoft Fabric.
Support identification and classification of sensitive information using Sensitive Information Types and classifiers.
Analyze policy matches, exceptions, false positives, and business impact, and tune controls to improve effectiveness.
Collaborate with application owners, data owners, and data stewards to remediate identified data-protection risks.
Implement and support Microsoft Purview Data Map and Unified Catalog capabilities.
Configure scanning and metadata collection across supported enterprise data environments.
Support data cataloging, business metadata, classification, lineage, data domains, and governance processes.
Work with data owners and stewards to improve data discoverability, ownership, quality, and governance.
Implement role-based access aligned with least-privilege principles.
Engineer and support Purview capabilities that improve visibility into sensitive-data exposure and risk.
Support Data Security Posture Management and collaborate with security teams on remediation.
Support Insider Risk Management, Audit, and data-security investigation requirements where applicable.
Develop monitoring and reporting for policy coverage, data exposure, control effectiveness, and remediation status.
Partner with cybersecurity teams during investigations involving sensitive enterprise information.
Configure and support eDiscovery, Audit, Data Lifecycle Management, Records Management, and Compliance Manager based on organizational requirements.
Partner with Legal, Cybersecurity, Privacy, Records Management, and Compliance teams to translate requirements into technical configurations.
Support retention, records, and information lifecycle requirements.
Produce technical documentation and evidence for governance, audit, and compliance processes.
Support secure enterprise adoption of AI applications and AI agents through appropriate Purview data-security controls.
Identify sensitive-data exposure and oversharing risks associated with enterprise AI use.
Work with AI, cybersecurity, identity, application, and data teams to establish reusable data-protection patterns for AI solutions.
Evaluate evolving Purview capabilities applicable to AI data security and incorporate approved capabilities into enterprise architecture.
Lead technical initiatives, solution designs, implementation patterns, and production deployments; mentor engineers and establish engineering standards and implementation practices.
Coordinate complex technical workstreams and delivery with multiple application and platform teams.