Purview Lead Security Engineer  

Position : Purview Lead Security Engineer
Job Description
We are looking for a Microsoft Purview Lead Security Engineer to implement, administer, troubleshoot, and optimise Microsoft Purview controls, support compliance investigations, mentor L1/L2 engineers, and assist with DPDP Act control mapping to strengthen data governance, regulatory compliance, access control, and Data Loss Prevention (DLP) initiatives.
The Ideal Candidate Should Have Hands-on Experience With
solution implementation, configuration, optimization, and operational support for Microsoft Purview.
Microsoft Purview Data Loss Prevention (DLP)
Endpoint DLP
Microsoft 365 Security & Compliance and Microsoft Purview
Data Classification and Sensitive Information Types
Sensitivity Labels and Auto-labelling
Data Lifecycle Management
Insider Risk Management (IRM)
eDiscovery (Standard & Premium)
Compliance Manager
Data Map & Unified Catalog
L3 support
Microsoft Defender, Microsoft Entra ID
SC-400 or SC-401
Required Skills & Experience
6-10 years of experience in Microsoft 365 Security & Compliance and Microsoft Purview.
Microsoft Purview Data Loss Prevention (DLP)
Endpoint DLP
Data Classification and Sensitive Information Types
Sensitivity Labels and Auto-labeling
Data Lifecycle Management (Retention Policies, Retention Labels, and Records Management)
Insider Risk Management (IRM)
eDiscovery (Standard & Premium), Audit, and Content Search
Compliance Manager
Data Map and Unified Catalog
Strong understanding of data governance, information protection, privacy, and regulatory compliance frameworks.
Familiarity with the Digital Personal Data Protection (DPDP) Act and experience in compliance control implementation and mapping.
Experience in L3 support, handling complex incident troubleshooting, root cause analysis (RCA), and technical escalations for Microsoft Purview and Microsoft 365 Compliance solutions.
Experience in solution implementation, configuration, optimization, and operational support for Microsoft Purview.
Knowledge of Microsoft Defender, Microsoft Entra ID, and Microsoft 365 Security integrations is an added advantage.
Strong analytical, troubleshooting, documentation, and communication skills with the ability to mentor junior engineers.
Key Responsibilities
Manage L3 support activities for Microsoft Purview and Microsoft 365 Compliance solutions, serving as the technical escalation point for complex incidents and critical issues.
Design, implement, administer, and optimize Microsoft Purview solutions across the organization.
Configure, review, and optimize DLP policies, Sensitivity Labels, Retention Labels, and other compliance controls to align with business and regulatory requirements.
Investigate and resolve complex incidents related to DLP, information protection, data classification, retention, audit, and compliance events, performing root cause analysis (RCA) where required.
Lead compliance investigations using Microsoft Purview Audit, Content Search, eDiscovery (Standard & Premium), and Compliance Manager.
Implement and validate technical controls aligned with the DPDP Act and organisational compliance requirements.
Collaborate with Security, Legal, Compliance, Risk, and IT teams to strengthen enterprise data governance and information protection.
Develop and maintain SOPs, operational runbooks, architecture documents, troubleshooting guides, and knowledge base documentation.
Ensure adherence to operational processes, SLAs, documentation, and security best practices.
Mentor L1/L2 engineers, provide technical guidance, and support knowledge-sharing initiatives.
Monitor compliance posture, policy effectiveness, and security alerts, recommending and implementing continuous improvements to enhance data protection and operational efficiency.
Preferred Certifications
Microsoft Certified: Information Security Administrator Associate (SC 401) - Preferred.
Microsoft Certified: Information Protection Administrator Associate (SC-400) - preferred.
Microsoft Security Operations Analyst (SC-200)
Microsoft Certified: Identity and Access Administrator Associate (SC-300)

Work arrangement
No