Sr Microsoft Purview Engineer

Evolver is seeking an experienced Senior Microsoft Purview Engineer to lead the technical design, engineering, and optimization of our enterprise data governance and protection platform. In this hands-on engineering role, you’ll serve as the technical authority on Microsoft Purview - architecting scalable solutions, building automation, integrating Purview with the broader security and data ecosystem, and continuously tuning the platform to keep pace with evolving threats and data landscapes. You’ll work deep in the technology stack, writing code, designing integrations, and engineering controls that protect sensitive data across cloud, hybrid, and SaaS environments., Architecture & Implementation

• Design and deploy enterprise-scale Microsoft Purview solutions across Microsoft 365, Azure, and hybrid environments
• Architect data classification, sensitivity labeling, and information protection strategies aligned with business and regulatory requirements
• Lead integrations between Purview and the broader security, data, and productivity ecosystem - including Microsoft Defender, Entra ID, Sentinel, third-party SIEM/SOAR platforms, cloud data warehouses, SaaS applications, ITSM tools, and custom data sources via API
• Develop and maintain Purview data maps, data catalogs, and lineage tracking for both structured and unstructured data

Data Loss Prevention & Information Protection

• Build and tune DLP policies across endpoints, email, Teams, SharePoint, OneDrive, and third-party SaaS applications
• Configure and manage sensitivity labels, auto-labeling policies, and encryption rules
• Implement Insider Risk Management policies, Communication Compliance, and Information Barriers
• Design retention policies, records management, and eDiscovery workflows

Operations & Optimization

• Monitor Purview health, alert volume, and policy effectiveness; tune to reduce false positives while maintaining coverage
• Investigate and respond to DLP incidents, insider risk alerts, and compliance escalations
• Build dashboards and reporting using Purview, Power BI, and KQL for executive and operational visibility
• Automate governance workflows using PowerShell, Microsoft Graph API, and Logic Apps

Leadership & Collaboration

• Partner with Legal, Privacy, Risk, and Compliance teams to translate regulatory requirements (GDPR, HIPAA, CCPA, SOX, etc.) into technical controls
• Mentor junior engineers and serve as the escalation point for complex Purview issues
• Lead vendor relationships with Microsoft and partner ecosystem
• Document architectures, runbooks, and standards; contribute to roadmap and strategic planning

Do you have experience in Vendor relationship building?, * 7 years in information security, data governance, or enterprise IT, with at least 3 years focused on Microsoft Purview (or its predecessors: Microsoft 365 Compliance Center, Azure Purview)

• 7 years of experience across the Purview portfolio: Data Loss Prevention, Information Protection, Insider Risk Management, Records Management, eDiscovery (Premium), Communication Compliance, and Data Catalog/Data Map
• 5 years of hands-on experience with Microsoft 365, Entra ID (formerly Azure AD), and Azure governance tools
• 5 years of experience in PowerShell and the Microsoft Graph API; familiarity with KQL for advanced hunting and reporting
• 5 years of experience working with major regulatory frameworks (GDPR, HIPAA, PCI-DSS, SOX, ISO 27001, NIST), * Microsoft certifications: SC-400 (Information Protection Administrator), SC-100 (Cybersecurity Architect), or MS-500
• Experience integrating Purview with non-Microsoft data sources (AWS, GCP, Snowflake, Databricks, Salesforce)
• Hands-on experience governing and protecting data within Snowflake - including classification, masking policies, row/column-level access controls, and lineage integration with Purview
• Experience with sensitivity labeling at scale, including auto-classification using trainable classifiers and exact data match (EDM)
• Strong understanding of identity, access management, and Zero Trust architecture principles
• Background in SIEM/SOAR platforms, including Microsoft Sentinel and CrowdStrike Next-Gen SIEM (Falcon LogScale)
• Familiarity with AI governance and protections for generative AI tools and platforms, including Microsoft Copilot, Anthropic Claude, Google Gemini, OpenAI ChatGPT/Enterprise, and Model Context Protocol (MCP) integrations
• Prior experience in regulated industries (financial services, healthcare, government)

Pulled from the full job description

• Parental leave
• 401(k)
• Health insurance
• Paid time off
• Vision insurance
• Dental insurance
• Flexible spending account, Actual salary will depend on factors such as skills, qualifications, experience, market and work location. The client offers benefits, including health, dental and vision insurance, 401(k), flexible spending account, and paid leave (including PTO and parental leave) in accordance with our applicable plans and policies.