Remote Microsoft Purview Cloud DLP Engineer

Required Skills & Experience

• 3–5 years of hands-on experience with Microsoft DLP, with at least 2 years within Microsoft Purview (formerly Microsoft 365 Compliance Center)
• Experience with mid to enterprise level companies (10-15k+ users/employees), and across a global footprint
• Experience building and tuning DLP policies across M365 workloads (Exchange, SharePoint, OneDrive, Teams, Endpoint DLP)
• Hands on experience with Microsoft Purview concepts including data labels, sensitivity labels/SITs, trainable classifiers, adaptive protection, and the Unified Labeling platform
• Experience with Microsoft Purview Information Protection (MIP), and Insider Risk Management (IRM)
• Ability to translate data protection requirements into technically sound DLP configurations
• Works well in team environment and collaborating with others
• Ability to communicate complex technical information to non-technical audience or stakeholders
• Able to work well in a remote environment

Nice to Have Skills & Experience

+ Scripting experience with PowerShell for automation + Familiarity with Microsoft Graph API for compliance-related automation + Microsoft certifications such as SC-400 (Microsoft Information Protection Administrator) or SC-200 + Exposure to eDiscovery, audit log review, or communication compliance within Purview

Job Description

Insight Global is looking for a Microsoft Purview Cloud DLP Engineer to join a M365 team within a leading global company. In this individual contributor role, you will own the ongoing tuning of the Data Loss Prevention program within the Microsoft Purview ecosystem. You will work closely with security, compliance, and IT teams to protect sensitive data across Microsoft 365, cloud workloads and business applications. This company is an enterprise scale (~20K users, ~2PB data, thousands of SharePoint sites, with a global footprint and hybrid cloud environment).

Responsibilities:

-Configure Purview to apply data sensitivity labels to documents and create Data Loss Prevention (DLP) rules that enforce policies based on those labels, controlling what actions can be performed on the data.

• Deploy, tune and maintain DLP policies in Microsoft Purview covering Exchange Online, SharePoint, OneDrive, and Teams at scale in their M365 environment
• Deploy and support anomaly detection and user quarantine in M365, for example detect suspicious mass data downloads and suspend the user account until the activity is validated
• Triage and investigate DLP policy alerts, refine rules and policies by testing and tuning to reduce false positives, and escalate confirmed incidents
• Develop playbooks with the security team to escalate confirmed incidents
• Build and maintain automation workflows using Power Automate and PowerShell to streamline DLP operations, alert handling, and reporting
• Define and manage sensitive information types (SITs), trainable classifiers, and sensitivity labels in alignment with data classification standards
• Collaborate with business stakeholders to understand data flows and translate requirements into effective DLP controls
• Produce regular metrics and dashboards on policy coverage, incident trends, and program health for security leadership
• Maintain documentation for DLP policies, runbooks, and change management records
• Stay current with Microsoft Purview product updates and assess impact to existing configurations
• Participate in change advisory and risk reviews for DLP policy modifications