Information Security Engineer - Microsoft Purview Specialist

Job Description
Join one of the nation’s most comprehensive academic medical centers, UChicago Medicine as an Information Security Engineer - Microsoft Purview Specialist for the Information Security department. This is a remote, work from home opportunity, and you may be based outside of the greater Chicagoland area.
The Microsoft Purview Specialist is responsible for the design, implementation, administration, monitoring, and continuous improvement of Microsoft Purview capabilities across the University of Chicago Medical Center Microsoft 365 environment.
This role serves as a technical subject matter expert for data protection, information governance, compliance, investigation, and data lifecycle capabilities within Microsoft Purview. The position works closely with Information Security, Privacy, Legal, Records Management, Microsoft 365 engineering, endpoint management, and application teams to translate organizational, regulatory, and business requirements into scalable technical controls.
The successful candidate will have hands-on experience administering Microsoft Purview in a complex enterprise environment and will understand how Purview capabilities interact with Microsoft 365 services including Exchange Online, SharePoint Online, OneDrive, Microsoft Teams, Microsoft 365 Apps, endpoints, and Microsoft Entra ID.
Essential Job Functions
Administer and maintain Microsoft Purview capabilities across the Microsoft 365 environment.
Design, configure, test, deploy, monitor, and tune Purview policies and controls.
Develop standards, operational procedures, technical documentation, and governance documentation for Purview services.
Information Protection and Classification.
Design and maintain the organization's Microsoft Purview Information Protection strategy.
Develop and manage sensitivity labels, label policies, publishing policies, protection settings, encryption controls, and related classification standards.
Configure and maintain Sensitive Information Types, Exact Data Match classifiers, trainable classifiers, keyword dictionaries, and other classification mechanisms where appropriate.
Develop DLP controls for Exchange Online, SharePoint Online, OneDrive, Microsoft Teams, Microsoft 365 applications, endpoints, and other supported workloads.
Configure policy tips, notifications, user overrides, incident reporting, auditing, restriction, and blocking actions.
Manage retention across Exchange Online, SharePoint Online, OneDrive, Teams, and other supported Microsoft 365 workloads.
Support evaluation, implementation, and administration of Microsoft Purview Insider Risk Management and Communication Compliance
Develop operational metrics and reporting for Purview controls.
Participate in development of enterprise information-protection and data-governance standards.
Develop and maintain PowerShell and Microsoft Graph automation used to administer, report on, validate, and monitor Microsoft Purview configurations.
Automate repetitive administrative and reporting processes where supported.
Develop scripts and tooling for configuration assessment, policy validation, reporting, and operational support.
Maintain source-controlled scripts and supporting technical documentation.
Required Qualifications
BS or BA degree in computer science, engineering, or equivalent education, training or work experience; master’s degree preferred
Strong hands-on experience administering Microsoft Purview in a production Microsoft 365 environment
Strong knowledge of Microsoft Purview Data Loss Prevention
Strong knowledge of Microsoft Purview Information Protection, sensitivity labels, sensitive information types, and classification technologies
Experience with Microsoft Purview Data Lifecycle Management and retention
Experience supporting Microsoft Purview Audit and eDiscovery
Strong understanding of Exchange Online, SharePoint Online, OneDrive, Microsoft Teams, and Microsoft 365 Apps
Understanding of Microsoft Entra ID identity, groups, roles, and access-control concepts
Experience administering Microsoft 365 using PowerShell
Experience troubleshooting enterprise Microsoft 365 policy and configuration issues
Experience creating technical documentation, operational procedures, and governance standards
Ability to translate security, privacy, regulatory, legal, and business requirements into technical configurations
Strong analytical and troubleshooting skills
Preferred Qualifications
Experience supporting Microsoft 365 in a healthcare environment
Experience implementing data-protection controls involving PHI and PII
Knowledge of HIPAA and healthcare data-protection requirements
Experience with Microsoft Purview Endpoint DLP
Experience with Microsoft Purview Insider Risk Management
Experience with Microsoft Purview Communication Compliance
Experience with Microsoft Purview Records Management
Experience with advanced Microsoft Purview eDiscovery workflows
Experience with Exact Data Match, trainable classifiers, custom Sensitive Information Types, and advanced classification techniques
Experience with Microsoft Graph and automation
Experience with Microsoft Intune, Microsoft Defender, and Microsoft Entra ID
Experience working within formal change-management and enterprise governance processes
Experience operating Microsoft 365 in a large, regulated enterprise
Position Details
Job Type/FTE: Full Time (1.0 FTE)
Shift: Day
Location: Remote
Unit/Department: Information Security
CBA Code: Non-Union
About Us
We’ve been at the forefront of medicine since 1899. We provide superior healthcare with compassion, always mindful that each patient is a person, an individual. To accomplish this, we need employees with passion, talent and commitment… with patients and with each other. We’re in this together: working to advance medical innovation, serve the health needs of the community, and move our collective knowledge forward. If you’d like to add enriching human life to your profile, UChicago Medicine is for you. Here at the forefront, we’re doing work that really matters. Join us. Bring your passion.
UChicago Medicine is growing; discover how you can be a part of this pursuit of excellence at: UChicago Medicine Career Opportunities
UChicago Medicine is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, ethnicity, ancestry, sex, sexual orientation, gender identity, marital status, civil union status, parental status, religion, national origin, age, disability, veteran status and other legally protected characteristics.
As a condition of employment, all employees are required to complete a pre-employment physical, background check, drug screening, and comply with the flu vaccination requirements prior to hire. Medical and religious exemptions will be considered for flu vaccination consistent with applicable law.
Compensation & Benefits Overview
UChicago Medicine is committed to transparency in compensation and benefits. The pay range provided reflects the anticipated wage or salary reasonably expected to be offered for the position.
The pay range is based on a full-time equivalent (1.0 FTE) and is reflective of current market data, reviewed on an annual basis. Compensation offered at the time of hire will vary based on candidate qualifications and experience and organizational considerations, such as internal equity. Pay ranges for employees subject to Collective Bargaining Agreements are negotiated by the medical center and their respective union.
Review the full complement of benefit options for eligible roles at Benefits - UChicago Medicine .

Work arrangement
Yes