Microsoft Purview Engineer (Data Protection & AI Security)

Note : Shift Timings (6:30pm To 3:30am IST)

About the Role

Looking for a hands-on Microsoft Purview Engineer to build, operate, and continuously harden data-protection and compliance controls across a well-resourced Microsoft 365 E5 estate and structured data sources. This is a build-and-run engineering role at the intersection of traditional M365 compliance and emerging AI data security.

You will own end-to-end sensitivity labeling, DLP, retention, and eDiscovery across Microsoft 365 workloads; deploy and operate Data Security Posture Management for AI (DSPM for AI) to govern how sensitive data is exposed to Copilot, ChatGPT, Claude, and other LLMs; and drive PII discovery and classification in SQL Server through the Microsoft Purview Data Map. If you can turn a compliance requirement directly into working, policy-as-configuration controls across both unstructured and structured data, with minimal hand-holding this role is for you.

What You’ll Do

Information Protection & DLP

Design, deploy, and tune sensitivity labels, label policies, auto-labeling, and encryption across Exchange, SharePoint, OneDrive, and Teams. Author and maintain DLP policies (including Endpoint DLP on Intune-managed devices), build and validate SITs, EDM schemas, and trainable classifiers, and reduce false positives through iterative tuning.

Data Lifecycle, Records & eDiscovery

Implement retention labels and policies, disposition-review workflows, and records-management controls aligned to regulatory and legal-hold obligations (HIPAA, PCI-DSS, GLBA, SEC/FINRA, or equivalent). Run eDiscovery (Standard & Premium), content search, and legal-hold workflows, supporting Legal and HR teams with collections, exports, and case management.

Insider Risk & Communication Compliance

Configure and triage Insider Risk Management policies in partnership with HR and Legal, and manage Communication Compliance reviews for policy and regulatory requirements.

DSPM for AI AI Data Security

Deploy and operate Microsoft Purview DSPM for AI to discover and monitor how sensitive data is exposed to Microsoft 365 Copilot, Copilot Studio agents, ChatGPT, Claude, and other generative-AI applications. Run oversharing and data-risk assessments, drive remediation through sensitivity labels, access reviews, and SharePoint Advanced Management, configure AI DLP and risky-interaction detection policies, and audit AI prompts and responses producing risk-posture reports for leadership.

Structured Data Discovery & Classification (SQL Server)

Register and scan SQL Server sources (on-premises via self-hosted integration runtime, and Azure SQL) in the Purview Data Map. Configure scan rule sets and schedules, classify PII at the column level, and tune built-in and custom classifiers for personal, financial, and health data. Profile and validate findings directly in SQL Server using T-SQL, bridge structured findings into M365 controls (e.g., EDM schemas that power DLP and auto-labeling), and maintain the data catalog, classifications, and lineage.

Operations, Governance & Automation

Monitor compliance alerts across the Purview portal and Microsoft Defender, maintain Compliance Manager assessments and audit evidence, automate recurring operations via Security & Compliance PowerShell and Microsoft Graph (Security API), and document architecture decisions, runbooks, and change records.

What We’re Looking For

• 4+ years in security or compliance engineering, including 2+ years hands-on with Microsoft Purview (compliance and information-protection workloads).
• Production experience with sensitivity labels, DLP policies, and retention configurations in a Microsoft 365 E5 tenant.
• Working knowledge of the broader M365 security stack: Entra ID, Intune, Microsoft Defender for Endpoint, Defender for Cloud Apps, and Exchange Online.
• Proficiency with Security & Compliance PowerShell for scripting and automating compliance operations.
• Solid grasp of data-classification concepts SITs, EDM schemas, and trainable classifiers and how labeling and DLP behave across M365 services.
• Hands-on experience with the Microsoft Purview Data Map: registering and scanning SQL Server sources (including self-hosted integration runtime for on-premises), configuring scan rule sets, and classifying PII at the column level.
• Working T-SQL proficiency able to profile tables and columns, sample data, and validate PII findings di…