Senior Microsoft Purview & Security Consultant (Contract)

• Purview Architecture: Design and deploy end-to-end Microsoft Purview suites (Sensitivity Labels, Automated Data Classification, Records Management).
• Data Loss Prevention: Build and enforce comprehensive DLP and Insider Risk Management policies across cloud, endpoint, web, and email environments.
• AI & Copilot Governance: Lead client workshops to assess data leakage risks and establish governance frameworks for safe Microsoft Copilot adoption.
• Compliance Frameworks: Map and align Microsoft SCI configurations to meet GDPR, DPA 2018, ISO 27001, Cyber Essentials, Cyber Essentials Plus, NIST, and ISO 27002 regulatory standards.
• Security Integration: Manage boundaries and alerts between the Microsoft E5 stack and ecosystem tools (e.g., Netskope, Mimecast, CyberArk, Entra ID).
• Consulting Delivery: Lead technical discovery sessions, capture requirements, and deliver production-ready high-quality technical blueprints.

• Eligibility & Education: Must hold a Bachelor’s degree in Computer Science, Cyber Security, or a related technical field, and possess the permanent right to work in the UK (no visa sponsorship offered).
• Microsoft Security & Purview Engineering: Deep technical expertise as a Lead Systems Engineer or Senior Security Architect delivering enterprise-scale Microsoft Purview implementations and Microsoft 365 security projects in client-facing environments.
• Subject Matter Expert: Advanced technical mastery of Microsoft Purview and the broader Microsoft Defender/Sentinel ecosystem.
• Azure & Hybrid Cloud Security: Extensive hands-on experience designing and securing cloud platforms, specifically using Azure (Azure Security Center/Defender for Cloud), alongside exposure to AWS or GCP security frameworks.
• Identity & Access Management (IAM): Deep understanding of modern authentication architectures, including SSO, ADFS, LDAP integration, PKI management, and secure remote access boundaries.
• Regulated Environments: Solid understanding of UK cyber security regulations, risk frameworks, and compliance auditing within financial frameworks.

Desirable:

• Ecosystem Awareness: Familiarity with cross-platform security vendors (Mimecast, Netskope, CyberArk) and network monitoring/vulnerability assessment tools (SolarWinds, PRTG, Nmap, Burp Suite).
• Microsoft Certifications: Active SC-400 (Information Protection) and SC-100 (Cybersecurity Architect) credentials. Secondary certifications like SC-300 (Identity) or SC-200 (Security Operations) are highly advantageous.
• Industry Certifications: Independent frameworks certifications such as CISSP, CISM, or ITIL foundations.