The Microsoft Information Protection (MIP) Engineer will support enterprise data protection initiatives focused on Data Loss Prevention (DLP), Microsoft Purview Information Protection, Controlled Unclassified Information (CUI) compliance, and emerging AI security technologies such as Microsoft Copilot. This role is responsible for designing, implementing, maintaining, and enhancing information protection controls that safeguard sensitive agency data while enabling secure collaboration and productivity. The ideal candidate will possess approximately five years of experience administering Microsoft information protection technologies, with demonstrated expertise in DLP, sensitivity labels, data classification, compliance monitoring, and security policy implementation within complex enterprise environments. This position is located in Washington, DC, and will be fully remote.
Responsibilities
- Design, implement, maintain, and optimize Microsoft Purview DLP policies across Microsoft 365 services.
- Develop and tune DLP controls to protect sensitive organizational data from unauthorized disclosure, accidental sharing, or data exfiltration.
- Analyze emerging technologies, including Microsoft Copilot, to assess impacts on existing DLP controls and recommend appropriate security enhancements.
- Support implementation of DLP controls for new business applications and platforms.
- Perform policy testing, validation, and user acceptance activities prior to production deployment.
- Investigate and resolve DLP-related incidents, alerts, and user support requests.
- Conduct periodic reviews of DLP policies to ensure continued effectiveness and compliance with organizational requirements.
- Collaborate with security, compliance, and business stakeholders to define and update DLP requirements.
Key Responsibilities Microsoft Information Protection / Sensitivity Labels (AIP)
- Administer and enhance Microsoft Purview Information Protection and Sensitivity Label programs.
- Design and manage sensitivity label taxonomies supporting Controlled Unclassified Information (CUI) and other data classification requirements.
- Develop and implement labeling strategies to improve enterprise data visibility and protection.
- Evaluate new Microsoft Information Protection features and determine suitability for organizational deployment.
- Support automated and manual document classification initiatives across large-scale enterprise environments.
- Develop controls that integrate sensitivity labels with DLP policies and other security technologies.
- Assist with SharePoint Online and document library labeling implementations.
Additional Areas of Work Microsoft Copilot Governance and AI Security
- Evaluate Microsoft Copilot security capabilities and information protection controls.
- Develop strategies that leverage sensitivity labels and DLP policies to restrict access to sensitive information within Copilot prompts and responses.
- Assess risks related to AI-enabled information access and recommend mitigation approaches.
- Support deployment planning and governance activities related to enterprise AI initiatives.
Audit, Compliance, and Security Support
- Support FISMA, OIG, and other compliance-related assessments.
- Assist in developing, testing, and deploying remediation efforts for audit findings.
- Create and maintain compliance evidence, system documentation, and security artifacts.
- Support development and testing of custom Sensitive Information Types (SITs) to meet organizational requirements.
- Collaborate with auditors, compliance personnel, and system owners during assessments and reviews.
- Contribute to NIST 800-53 control implementation and evidence collection activities
Reporting and Analytics
- Develop and maintain reporting solutions that provide visibility into DLP effectiveness, CUI adoption, and information protection trends.
- Create dashboards and metrics supporting executive and operational decision-making.
- Analyze security, labeling, and policy usage data to identify improvement opportunities.
- Support migration or modernization efforts associated with reporting platforms and analytics tools.
Stakeholder Engagement
- Participate in regular meetings with customers, security teams, compliance personnel, and Microsoft representatives.
- Provide technical guidance and recommendations regarding information protection best practices.
- Support end-user adoption efforts through documentation, troubleshooting, and knowledge transfer.
Qualifications
Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or related field (or equivalent experience) with 9+ years (or commensurate experience)
Required Skills and Experience
- Approximately 5 years of experience implementing and supporting Microsoft Information Protection technologies.
- Experience administering:
- Microsoft Purview Data Loss Prevention (DLP)
- Microsoft Information Protection (MIP)
- Sensitivity Labels
- Microsoft 365 Compliance and Security solutions
- Experience supporting CUI or similar information classification programs.
- Experience developing and maintaining data protection policies and controls.
- Knowledge of Microsoft 365 security architecture and compliance capabilities.
- Experience supporting security audits, regulatory assessments, or compliance programs.
- Strong analytical and troubleshooting skills.
- Excellent written and verbal communication skills.
Clearance Required: Must be able to attain and maintain EPA Public Trust
Preferred Skills and Experience
- Microsoft security certifications such as:
- SC-400: Information Protection Administrator
- SC-300: Identity and Access Administrator
- SC-900: Security, Compliance, and Identity Fundamentals
- AZ-104 or other Azure certifications
- Experience supporting Microsoft Copilot governance, security, and compliance initiatives.
- Experience developing custom Sensitive Information Types (SITs).
- Familiarity with NIST 800-53, FISMA, and federal cybersecurity requirements.
- Experience with SharePoint Online information protection capabilities.
- Experience creating security dashboards and reporting solutions utilizing: Qlik, and /or Power BI
- Other enterprise reporting platforms
- Experience supporting large-scale document classification and labeling initiatives involving millions of documents.
- ServiceNow administration or security integration experience.
- Experience supporting DLP or information protection requirements within ServiceNow environments.
- Experience with Azure NetApp Files and associated security, storage, or compliance controls.
- Clearance Required:
Posted Salary Range
USD $125,000.00 - USD $150,000.00 /Yr.
- Design, implement, maintain, and optimize Microsoft Purview DLP policies across Microsoft 365 services.
- Develop and tune DLP controls to protect sensitive organizational data from unauthorized disclosure, accidental sharing, or data exfiltration.
- Analyze emerging technologies, including Microsoft Copilot, to assess impacts on existing DLP controls and recommend appropriate security enhancements.
- Support implementation of DLP controls for new business applications and platforms.
- Perform policy testing, validation, and user acceptance activities prior to production deployment.
- Investigate and resolve DLP-related incidents, alerts, and user support requests.
- Conduct periodic reviews of DLP policies to ensure continued effectiveness and compliance with organizational requirements.
- Collaborate with security, compliance, and business stakeholders to define and update DLP requirements.
Key Responsibilities Microsoft Information Protection / Sensitivity Labels (AIP)
- Administer and enhance Microsoft Purview Information Protection and Sensitivity Label programs.
- Design and manage sensitivity label taxonomies supporting Controlled Unclassified Information (CUI) and other data classification requirements.
- Develop and implement labeling strategies to improve enterprise data visibility and protection.
- Evaluate new Microsoft Information Protection features and determine suitability for organizational deployment.
- Support automated and manual document classification initiatives across large-scale enterprise environments.
- Develop controls that integrate sensitivity labels with DLP policies and other security technologies.
- Assist with SharePoint Online and document library labeling implementations.
Additional Areas of Work Microsoft Copilot Governance and AI Security
- Evaluate Microsoft Copilot security capabilities and information protection controls.
- Develop strategies that leverage sensitivity labels and DLP policies to restrict access to sensitive information within Copilot prompts and responses.
- Assess risks related to AI-enabled information access and recommend mitigation approaches.
- Support deployment planning and governance activities related to enterprise AI initiatives.
Audit, Compliance, and Security Support
- Support FISMA, OIG, and other compliance-related assessments.
- Assist in developing, testing, and deploying remediation efforts for audit findings.
- Create and maintain compliance evidence, system documentation, and security artifacts.
- Support development and testing of custom Sensitive Information Types (SITs) to meet organizational requirements.
- Collaborate with auditors, compliance personnel, and system owners during assessments and reviews.
- Contribute to NIST 800-53 control implementation and evidence collection activities
Reporting and Analytics
- Develop and maintain reporting solutions that provide visibility into DLP effectiveness, CUI adoption, and information protection trends.
- Create dashboards and metrics supporting executive and operational decision-making.
- Analyze security, labeling, and policy usage data to identify improvement opportunities.
- Support migration or modernization efforts associated with reporting platforms and analytics tools.
Stakeholder Engagement
- Participate in regular meetings with customers, security teams, compliance personnel, and Microsoft representatives.
- Provide technical guidance and recommendations regarding information protection best practices.
- Support end-user adoption efforts through documentation, troubleshooting, and knowledge transfer.
Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or related field (or equivalent experience) with 9+ years (or commensurate experience)
Required Skills and Experience
- Approximately 5 years of experience implementing and supporting Microsoft Information Protection technologies.
- Experience administering:
- Microsoft Purview Data Loss Prevention (DLP)
- Microsoft Information Protection (MIP)
- Sensitivity Labels
- Microsoft 365 Compliance and Security solutions
- Experience supporting CUI or similar information classification programs.
- Experience developing and maintaining data protection policies and controls.
- Knowledge of Microsoft 365 security architecture and compliance capabilities.
- Experience supporting security audits, regulatory assessments, or compliance programs.
- Strong analytical and troubleshooting skills.
- Excellent written and verbal communication skills.
Clearance Required: Must be able to attain and maintain EPA Public Trust
Preferred Skills and Experience
- Microsoft security certifications such as:
- SC-400: Information Protection Administrator
- SC-300: Identity and Access Administrator
- SC-900: Security, Compliance, and Identity Fundamentals
- AZ-104 or other Azure certifications
- Experience supporting Microsoft Copilot governance, security, and compliance initiatives.
- Experience developing custom Sensitive Information Types (SITs).
- Familiarity with NIST 800-53, FISMA, and federal cybersecurity requirements.
- Experience with SharePoint Online information protection capabilities.
- Experience creating security dashboards and reporting solutions utilizing: Qlik, and /or Power BI
- Other enterprise reporting platforms
- Experience supporting large-scale document classification and labeling initiatives involving millions of documents.
- ServiceNow administration or security integration experience.
- Experience supporting DLP or information protection requirements within ServiceNow environments.
- Experience with Azure NetApp Files and associated security, storage, or compliance controls.
- Clearance Required: