Microsoft Purview Data Security Architect

Our client, a large professional services firm, is looking to hire a Microsoft Purview Data Security Architect for a 450-hour remote contract. The consultant will establish a right-sized sensitivity label framework and DLP policies to protect Microsoft 365 data, with measurable reduction in risk. The customer is going to start with a small, clear label taxonomy and testing configurations with users before broad rollout. The consultant will work to validate auto-labeling and DLP in simulation mode before moving to enforcement, then tuning to reduce false positives. Microsoft’s auto-label workflow requires simulation; DLP simulation is recommended for tuning prior to enforcement. The consultant will integrate Microsoft Defender for Cloud Apps (MDCA) with Purview to apply or honor labels in sanctioned third-party apps and to support session controls where applicable. The Architect will also pilot Insider Risk Management with defined policy templates and scoped users; establish triage and escalation workflows into eDiscovery. The consultant will plan and then deploy the Microsoft Purview Information Protection (MIP) scanner for prioritized on-premises repositories using a supported Windows Server service and a dedicated SQL instance.