Microsoft Purview and Data Protection Engineer (Cybersecurity)

Location: Washington, DC; in-office 4 days per week. The compensation range also applies to New York, NY.

Salary: $160,000–$180,000 base salary per year, plus potential annual discretionary incentive compensation.

Company

Private markets investment firm bringing together capital, ideas, and companies to support growth and investor performance.

What you will do

• Design, implement, and continuously enhance Microsoft Purview data protection capabilities across Microsoft 365, Azure, endpoints, cloud applications, and AI services.
• Administer DLP, Insider Risk Management, Information Protection, data classification, labeling, retention, investigation, and governance solutions.
• Develop and tune enterprise DLP policies for email, endpoints, cloud applications, Teams, SharePoint, OneDrive, and web uploads.
• Implement DSPM capabilities, assess data exposure, interpret recommendations, and improve policy coverage and risk reduction.
• Integrate Microsoft Purview with Microsoft Defender, Microsoft Entra ID, Microsoft Sentinel, and related security technologies.
• Lead health checks, proof-of-concept deployments, remediation, incident investigations, automation, and operational improvements.

Requirements

• Bachelor’s degree in cybersecurity, computer science, information systems, engineering, or a related discipline, or equivalent professional experience.
• Senior-level technical expertise in Microsoft Purview DLP, Insider Risk Management, Information Protection, and DSPM.
• Experience designing, deploying, and administering Purview policies across Microsoft 365 services and supported cloud applications.
• Knowledge of Sensitive Information Types, Exact Data Match, trainable classifiers, custom classifiers, sensitivity labels, encryption, and rights management.
• Experience with Microsoft Defender XDR, Microsoft Sentinel, Microsoft Entra ID, and Microsoft 365 E5 Security.
• Knowledge of data protection, compliance, monitoring, incident response, least privilege, and Zero Trust principles.

Nice to have

• Microsoft SC-400, SC-401, or equivalent current certification.
• Microsoft SC-100 certification or an advanced related degree.
• Experience implementing AI governance and protecting Microsoft 365 Copilot and other AI services with Microsoft Purview.
• Familiarity with GDPR, CCPA, HIPAA, PCI DSS, SOX, NIST, and ISO 27001.

Culture & Benefits

• Collaboration with Security Operations, Infrastructure, Cloud Engineering, Compliance, Legal, Risk, and business stakeholders.
• Retirement benefits, health insurance, life insurance, and disability coverage.
• Paid time off and paid holidays.
• Family planning benefits and wellness programs.
• Potential participation in an annual discretionary incentive program based on individual and organizational performance.