Purview Lead Security Engineer

Position : Purview Lead Security Engineer Job Description We are looking for a Microsoft Purview Lead Security Engineer to implement, administer, troubleshoot, and optimise Microsoft Purview controls, support compliance investigations, mentor L1/L2 engineers, and assist with DPDP Act control mapping to strengthen data governance, regulatory compliance, access control, and Data Loss Prevention (DLP) initiatives.

The Ideal Candidate Should Have Hands-on Experience With

• solution implementation, configuration, optimization, and operational support for Microsoft Purview.
• Microsoft Purview Data Loss Prevention (DLP)
• Endpoint DLP
• Microsoft 365 Security & Compliance and Microsoft Purview
• Data Classification and Sensitive Information Types
• Sensitivity Labels and Auto-labelling
• Data Lifecycle Management
• Insider Risk Management (IRM)
• eDiscovery (Standard & Premium)
• Compliance Manager
• Data Map & Unified Catalog
• L3 support
• Microsoft Defender, Microsoft Entra ID
• SC-400 or SC-401

Required Skills & Experience

• 6-10 years of experience in Microsoft 365 Security & Compliance and Microsoft Purview.
• Microsoft Purview Data Loss Prevention (DLP)
• Endpoint DLP
• Data Classification and Sensitive Information Types
• Sensitivity Labels and Auto-labeling
• Data Lifecycle Management (Retention Policies, Retention Labels, and Records Management)
• Insider Risk Management (IRM)
• eDiscovery (Standard & Premium), Audit, and Content Search
• Compliance Manager
• Data Map and Unified Catalog
• Strong understanding of data governance, information protection, privacy, and regulatory compliance frameworks.
• Familiarity with the Digital Personal Data Protection (DPDP) Act and experience in compliance control implementation and mapping.
• Experience in L3 support, handling complex incident troubleshooting, root cause analysis (RCA), and technical escalations for Microsoft Purview and Microsoft 365 Compliance solutions.
• Experience in solution implementation, configuration, optimization, and operational support for Microsoft Purview.
• Knowledge of Microsoft Defender, Microsoft Entra ID, and Microsoft 365 Security integrations is an added advantage.
• Strong analytical, troubleshooting, documentation, and communication skills with the ability to mentor junior engineers.

Key Responsibilities

• Manage L3 support activities for Microsoft Purview and Microsoft 365 Compliance solutions, serving as the technical escalation point for complex incidents and critical issues.
• Design, implement, administer, and optimize Microsoft Purview solutions across the organization.
• Configure, review, and optimize DLP policies, Sensitivity Labels, Retention Labels, and other compliance controls to align with business and regulatory requirements.
• Investigate and resolve complex incidents related to DLP, information protection, data classification, retention, audit, and compliance events, performing root cause analysis (RCA) where required.
• Lead compliance investigations using Microsoft Purview Audit, Content Search, eDiscovery (Standard & Premium), and Compliance Manager.
• Implement and validate technical controls aligned with the DPDP Act and organisational compliance requirements.
• Collaborate with Security, Legal, Compliance, Risk, and IT teams to strengthen enterprise data governance and information protection.
• Develop and maintain SOPs, operational runbooks, architecture documents, troubleshooting guides, and knowledge base documentation.
• Ensure adherence to operational processes, SLAs, documentation, and security best practices.
• Mentor L1/L2 engineers, provide technical guidance, and support knowledge-sharing initiatives.
• Monitor compliance posture, policy effectiveness, and security alerts, recommending and implementing continuous improvements to enhance data protection and operational efficiency.

Preferred Certifications

• Microsoft Certified: Information Security Administrator Associate (SC 401) - Preferred.
• Microsoft Certified: Information Protection Administrator Associate (SC-400) - preferred.
• Microsoft Security Operations Analyst (SC-200)
• Microsoft Certified: Identity and Access Administrator Associate (SC-300)