Microsoft Purview DLP Senior Engineer/SME

Microsoft Purview DLP Senior Engineer/SME – JD

• Mandatory Skills: Microsoft Information Protection.

Must Have

• Proven Microsoft Purview design and hands-on delivery experience in complex enterprise environments.
• Mandatory hands-on experience with Microsoft Purview Data Loss Prevention across Exchange, SharePoint, OneDrive, Teams, endpoint and relevant cloud scenarios.
• Mandatory experience with Purview data capabilities, including classification, sensitive information types, trainable classifiers, sensitivity labels, auto-labelling, retention, audit, eDiscovery and compliance reporting.
• Mandatory Enterprise Data Management knowledge, including data governance, ownership, metadata, data quality, lifecycle management and alignment with Purview controls.
• Ability to support customer design decisions while enabling the partner team to build, configure, test and resolve defects.
• Strong understanding of Purview policy architecture, including locations, conditions, actions, exceptions, policy tips, overrides, alerts and enforcement modes.
• Experience implementing discovery, simulation, pilot and phased enforcement approaches that balance risk reduction, compliance and user experience.
• Ability to translate regulatory, privacy, security, records management and business requirements into practical Purview configurations and operating processes.
• Experience defining governance and operating inputs for ownership, incident triage, investigation, exceptions, escalation, reporting and continuous improvement.
• Strong knowledge of Microsoft 365 security and compliance administration, including Exchange, SharePoint, OneDrive, Teams, Entra ID and endpoint integration considerations.
• Strong stakeholder management skills, with the ability to explain design options, configuration impacts, trade-offs and risk decisions clearly. · Strong documentation skills, including designs, policy standards, control mappings, test scripts, runbooks and implementation roadmaps.

Nice to Have

• Experience with Microsoft Defender for Cloud Apps, Microsoft Defender for Endpoint, Microsoft Sentinel or SOC workflows that integrate with DLP monitoring and response.
• Experience with advanced classification techniques such as exact data match, named entities, custom sensitive information types and machine learning-based classifiers.
• Knowledge of compliance and privacy frameworks relevant to DLP, such as GDPR, ISO 27001, NIST, PCI DSS or sector-specific data handling obligations. · Knowledge of Dutch telecommunications regulation, including ACM expectations, Dutch Telecommunications Act considerations and telecoms-specific security, privacy and data handling obligations.
• Experience supporting AI readiness, Copilot readiness, data security posture management and sensitive data risk mitigation for generative AI use cases.
• Experience with PowerShell, Microsoft Graph, Purview APIs or automation approaches for scalable policy management, reporting and evidence collection.
• Experience integrating DLP controls with broader data protection capabilities such as Information Protection, Insider Risk Management, Communication Compliance, retention and eDiscovery.
• Relevant Microsoft certifications, such as Microsoft security, compliance, identity, information protection or Azure architecture certifications.
• Consulting experience, including pre-sales support, solution shaping, estimating, delivery planning and executive-level presentations.