Senior Microsoft Purview Security Engineer

TAXWELL•Haverford, PA

1d•Remote

About The Position

This position focuses on security engineering, data protection, and compliance technology, with primary responsibility for designing, implementing, administering, and continuously improving Microsoft Purview and its integrations across the Microsoft 365, Azure, and broader enterprise environment. The role will lead technical projects involving information protection, data loss prevention, data governance, records management, eDiscovery, and the protection of sensitive taxpayer and business information. This individual will work closely with Security, Privacy, Legal, GRC, IT, cloud, and application teams to translate regulatory and business requirements into practical, enforceable technical controls. A central responsibility of the position is supporting the organization’s compliance with Internal Revenue Code §7216 and related requirements governing the use and disclosure of tax-return information.

Requirements

Five or more years of experience in security engineering, data security, data governance, Microsoft 365 administration, compliance engineering, or a related field.
Hands-on experience deploying and administering Microsoft Purview in an enterprise Microsoft 365 environment.
Experience with Purview Information Protection, sensitivity labels, Data Loss Prevention, Data Lifecycle Management, Records Management, Audit, and eDiscovery.
Strong understanding of data classification, data governance, privacy, retention, encryption, least privilege, and compliance-control design.
Experience administering Microsoft 365 and Microsoft Entra ID roles, permissions, groups, identities, and access controls.
Ability to design, test, implement, document, and maintain security and compliance policies.
Experience assessing business and regulatory requirements and translating them into technical controls.
Experience implementing controls for sensitive financial, tax, customer, or personally identifiable information.
Experience implementing or integrating security and data-protection capabilities in Microsoft Azure and/or AWS.
Strong troubleshooting, analytical, project-management, and technical-documentation skills.
Excellent written and verbal communication skills, including the ability to explain technical controls to Legal, Privacy, Compliance, and business stakeholders.
Highly self-motivated, able to manage competing priorities, and comfortable operating independently in a fast-paced environment.

Nice To Haves

Experience supporting a tax-preparation, financial-services, accounting, consulting, software, or other highly regulated organization.
Familiarity with IRS taxpayer-data safeguarding guidance, the FTC Safeguards Rule, and written information security plan requirements applicable to tax-return preparers.
Experience with Microsoft Defender XDR, Defender for Cloud Apps, Microsoft Sentinel, and CrowdStrike Falcon integrations.
Experience integrating Purview controls with SaaS applications, cloud storage, data platforms, and custom business applications.
Familiarity with APIs, Microsoft Graph, infrastructure-as-code, and configuration-management practices.
Microsoft certifications such as SC-400, SC-300, MS-102, or comparable data-security, privacy, or cloud certifications.
Bachelor’s degree in cybersecurity, information technology, computer science, information systems, or a related discipline, or equivalent professional experience.

Responsibilities

Lead Microsoft Purview and data-protection projects from requirements gathering and solution design through implementation, testing, documentation, and production deployment.
Deploy, configure, administer, and optimize Microsoft Purview and its integrations with Microsoft 365, Microsoft Entra ID, Azure, endpoints, and other enterprise platforms.
Design and implement enterprise data-classification, sensitivity-labeling, encryption, and data loss prevention policies.
Develop automated and trainable classifiers for taxpayer information, financial data, personally identifiable information, credentials, intellectual property, and other regulated or sensitive information.
Configure and maintain DLP controls across Exchange Online, SharePoint, OneDrive, Teams, endpoints, and supported cloud applications.
Administer Purview role groups, custom roles, permissions, administrative boundaries, and least-privilege access.
Configure and maintain Information Protection, Data Loss Prevention, Data Lifecycle Management, Records Management, Audit, and Communication Compliance capabilities.
Support eDiscovery workflows, including preservation, legal holds, collections, searches, review sets, exports, and coordination with Legal and Privacy teams.
Develop and maintain retention labels, retention policies, disposition requirements, and records-management controls based on legal, regulatory, privacy, and business requirements.
Implement technical controls supporting IRS §7216 restrictions on the unauthorized use or disclosure of tax-return information.
Implement least-privilege access, access reviews, audit logging, encryption, DLP, retention, and data-handling controls for taxpayer information.
Help prevent unauthorized sharing of taxpayer information with internal users, external recipients, service providers, cloud applications, and other third parties.
Maintain auditable evidence of policy configuration, administrative activity, access, sharing, labeling, retention, and approved data-handling exceptions.
Design controls that distinguish tax-return preparation activities from secondary uses of taxpayer information, including analytics, marketing, product development, artificial intelligence, and other non-preparation purposes.
Conduct regular assessments of Purview configurations, data-governance practices, permissions, policy coverage, exceptions, and control effectiveness.
Test policies before production deployment and tune configurations to reduce unnecessary business disruption while maintaining required protection.
Troubleshoot Purview service, policy, integration, permission, and data-classification issues.
Monitor platform health, policy deployment status, scanner coverage, connector status, and integration performance.
Develop PowerShell and Python automation for policy administration, reporting, access reviews, configuration validation, evidence collection, and other repeatable governance activities.
Create dashboards and reports showing sensitive-data locations, policy coverage, labeling adoption, DLP trends, access risks, retention status, and compliance gaps.
Integrate Purview with Microsoft Defender XDR, Microsoft Entra ID, Azure, AWS, and other security or data platforms where appropriate.
Collaborate with data architects, application owners, developers, IT, cloud engineering, Security, Legal, Privacy, and GRC teams to strengthen data governance and protection.
Evaluate new applications, integrations, cloud services, and AI use cases for sensitive-data handling and Purview control requirements.
Create and maintain technical designs, configuration standards, operating procedures, data-flow documentation, control mappings, and administrator guidance.
Provide training and technical support to administrators, data owners, business users, Legal, Privacy, and Compliance stakeholders.
Willingness to explore creative AI solutions within Microsoft ecosystem