> Markdown version of [/jobs/ext/1946055-microsoft-purview-and-data-protection-engineer](https://www.wearedevelopers.com/jobs/ext/1946055-microsoft-purview-and-data-protection-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Microsoft Purview and Data Protection Engineer - **Company:** CARLYLE - **Location:** Washington, DC, United States - **Experience:** Expert - **Salary:** $160,000.0 - $180,000.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Artificial Intelligence, Data Analysis, Microsoft Antivirus, Microsoft Azure, Software as a Service, Cloud Computing, Cloud Engineering, Cyber Security, Information Systems, Data Discovery, Data Governance, Information Leak Prevention, Data Security, Information Lifecycle Management, Information Security Management, Microsoft Security Essentials, Azure Active Directory, Zero Trust Network Access, Microsoft SharePoint, Systems Integration, Unstructured Data, Enterprise Data Management, Data Classification, Office365, Microsoft Onedrive, AI Platforms, Information Technology, Microsoft Sentinel - **Published:** August 6, 2026 - **Apply:** https://www.careerjet.com/job/usf48b75ab161526eeddc2e69a287a34cd/eaa ## About the Role * Bachelor's degree, required * Concentration in cybersecurity, computer science, information systems, engineering or a related discipline, or equivalent relevant professional experience. * Advanced degree in a related discipline is preferred. Preferred Qualifications * Microsoft SC-400: Information Protection Administrator Associate. * Microsoft SC-401: Information Security Administrator (or equivalent current certification). * Microsoft SC-100: Cybersecurity Architect Expert (preferred). * Experience with Microsoft Defender XDR, Microsoft Sentinel, Microsoft Entra ID, and Microsoft 365 E5 Security. * Experience implementing AI governance and protecting Microsoft 365 Copilot and other AI services using Microsoft Purview. Competencies & Attributes * Data Protection Concepts * Strong understanding of enterprise data protection principles, including: * Data Loss Prevention (DLP) * Data Security Posture Management (DSPM) * Data Classification * Data Discovery * Data Governance * Information Protection * Sensitivity Labels * Data Lifecycle Management * Encryption technologies * Least Privilege and Zero Trust security models * Knowledge of structured and unstructured data protection strategies. * Information Protection ## Description The Microsoft Purview and Data Protection Engineer is a senior technical leader responsible for designing, implementing, and continuously enhancing the organization's enterprise data protection capabilities. This hands-on role serves as the technical authority for Microsoft Purview, leading the operational management of Data Loss Prevention (DLP), Insider Risk Management, Information Protection, Data Security Posture Management (DSPM), and related Microsoft security technologies. Working closely with Security Operations, Infrastructure, Cloud Engineering, Compliance, Legal, Risk, and business stakeholders, the engineer develops scalable solutions that protect the firm's most sensitive information while enabling secure business collaboration and innovation. The successful candidate combines deep technical expertise with strategic thinking to build and mature enterprise data protection capabilities across Microsoft 365, Azure, endpoints, cloud applications, and emerging AI technologies. This role is responsible for translating security and regulatory requirements into effective technical controls, developing enterprise-wide policies and standards, leading complex implementations, and driving continuous improvements through automation, analytics, and operational excellence. The engineer serves as the technical lead for high-impact initiatives, providing architecture guidance, troubleshooting complex issues, mentoring engineers, and establishing best practices for protecting sensitive data throughout its lifecycle. As a key member of the cybersecurity organization, the Microsoft Purview and Data Protection Engineer partners with cross-functional teams to identify and reduce data protection risks, investigate complex security events, and enhance the organization's overall security posture. The role requires a proactive, innovation-focused mindset with a strong emphasis on automation, operational efficiency, and emerging technologies, including AI-powered security capabilities. The ideal candidate is passionate about solving complex technical challenges, influencing enterprise security strategy through technical expertise, and delivering resilient, scalable data protection solutions that support business objectives while maintaining the highest standards of information security and regulatory compliance. In-Office Requirement: 4 days per week Primary Responsibilities Core Responsibilities * Assessing firm data governance and compliance environments and developing recommendations for Microsoft Purview capabilities, including Data Loss Prevention, Compliance Manager, and Information Protection. * Designing and implementing Microsoft Purview solutions to support data classification, labeling, retention, investigation, and governance requirements across enterprise environments. * Performing technical health checks, discovery, and remediation activities for Microsoft Purview deployments, including audit, privileged access, and policy configuration reviews. * Supporting proof of concept, deployment, integration, and post-implementation activities for Microsoft Purview and adjacent Microsoft security and compliance technologies. Microsoft Purview - 50% * Expert knowledge of Microsoft Purview Data Loss Prevention (DLP), Insider Risk Management, and Information Protection. * Experience designing, deploying, and administering Microsoft Purview policies across Microsoft 365, Windows endpoints, Exchange Online, SharePoint Online, OneDrive, Microsoft Teams, and supported cloud applications. * Strong understanding of Microsoft Purview architecture, licensing, role-based administration, and compliance portal configuration. * Experience integrating Microsoft Purview with Microsoft Defender, Microsoft Entra ID, Microsoft Sentinel, and other Microsoft security technologies. Data Loss Prevention DLP - 30% * Design, implement, and maintain enterprise DLP policies to prevent unauthorized disclosure of sensitive information. * Develop DLP controls for email, endpoint devices, cloud applications, Microsoft Teams, SharePoint, OneDrive, and web uploads. * Configure policy tips, user notifications, incident reporting, and automated remediation workflows. * Tune DLP policies to reduce false positives while maintaining effective protection. * Experience using Sensitive Information Types (SITs), Exact Data Match (EDM), trainable classifiers, and custom classifiers. Data Security Posture Management (DSPM) - 20% * Experience implementing or supporting Microsoft Purview Data Security Posture Management (DSPM). * Assess organizational data exposure and identify risks across Microsoft 365, Azure, and connected SaaS platforms. * Interpret DSPM recommendations and translate them into actionable DLP, Insider Risk, and Information Protection controls. * Monitor data security posture metrics and continuously improve policy coverage and risk reduction., * Design and Manage Microsoft Purview Sensitivity Labels and Label Policies. * Configure automatic and recommended labeling. * Implement encryption and rights management for sensitive corporate information. * Support secure collaboration while protecting confidential data. * Monitoring and Incident Response * Monitor DLP and Insider Risk alerts and perform root cause analysis. * Investigate policy violations and coordinate remediation efforts. * Develop dashboards and reports to measure program effectiveness. * Identify opportunities for automation and operational efficiency. * Compliance & Governance * Familiarity with regulatory and industry frameworks including ## Related Videos - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) - [This App Reached 10,000 Users in One Week. Here's How.](https://www.wearedevelopers.com/videos/100329-this-app-reached-10-000-users-in-one-week-here-s-how) - [Data Science in Retail](https://www.wearedevelopers.com/videos/586-data-science-in-retail) - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [From AI Assistance to Agentic Systems: Scaling Sovereign AI in Banking](https://www.wearedevelopers.com/videos/100070-from-ai-assistance-to-agentic-systems-scaling-sovereign-ai-in-banking) - [Data Science on Software Data](https://www.wearedevelopers.com/videos/162-data-science-on-software-data) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Everything a Developer Needs to Know About MCP with Neo4j](https://www.wearedevelopers.com/magazine/604-everything-a-developer-needs-to-know-about-mcp-with-neo4j) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Dev Digest 164: AI Agents, AI Blindspots and MCP security problems](https://www.wearedevelopers.com/magazine/578-dev-digest-164-ai-agents-ai-blindspots-and-mcp-security-problems) - [Dev Digest 162: AI careers, MCP, AWS best practices & floppy sweaters](https://www.wearedevelopers.com/magazine/571-dev-digest-162-ai-careers-mcp-aws-best-practices-floppy-sweaters) - [Coffee with Developers - Maria Apazoglou - Making AI understandable for all in production](https://www.wearedevelopers.com/magazine/475-coffee-with-developers-maria-apazoglou-making-ai-understandable-for-all-in-production)