Information Protection Engineer

This is a fully remote position, open to applicants in District of Columbia, +1 more state.

📋 Description

• Design, implement, maintain, and enhance Microsoft Purview DLP policies across Microsoft 365 services.

• Develop and fine-tune DLP controls to safeguard sensitive organizational data from unauthorized exposure, accidental sharing, or data exfiltration.

• Assess emerging technologies, including Microsoft Copilot, to evaluate their impact on existing DLP controls and propose security improvements.

• Assist in the implementation of DLP controls for new business applications and platforms.

• Execute policy testing, validation, and user acceptance activities prior to production rollout.

• Investigate and resolve incidents, alerts, and user support requests related to DLP.

• Conduct regular reviews of DLP policies to ensure their effectiveness and compliance.

• Collaborate with security, compliance, and business stakeholders to define and update DLP requirements.

• Administer and enhance Microsoft Purview Information Protection and Sensitivity Label programs.

• Design and manage sensitivity label taxonomies for Controlled Unclassified Information (CUI) and other data classification needs.

• Develop labeling strategies and facilitate both automated and manual document classification.

• Evaluate Microsoft Information Protection features for potential organizational deployment.

• Integrate sensitivity labels with DLP policies and other security technologies.

• Support labeling implementations for SharePoint Online and document libraries.

• Assess the security capabilities of Microsoft Copilot and its information protection controls.

• Develop strategies for Copilot using sensitivity labels and DLP policies to limit access to sensitive information.

• Evaluate risks associated with AI-enabled information access and recommend mitigations.

• Assist in planning and governance for enterprise AI deployment.

• Support compliance assessments for FISMA, OIG, and other regulatory requirements.

• Create, test, and deploy remediation strategies for audit findings.

• Generate and maintain compliance evidence, system documentation, and security artifacts.

• Assist in the development and testing of custom Sensitive Information Types (SITs).

• Collaborate with auditors, compliance personnel, and system owners.

• Contribute to the implementation of NIST 800-53 controls and evidence collection.

• Develop reporting solutions, dashboards, and metrics for DLP effectiveness, CUI adoption, and information protection trends.

• Analyze data related to security, labeling, and policy usage and support the modernization of reporting platforms.

• Participate in meetings with customers, security teams, compliance personnel, and Microsoft representatives.

• Provide technical guidance on best practices for information protection.

• Support end-user adoption through documentation, troubleshooting, and knowledge transfer.

⛳️ Requirements

• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or a related field (or equivalent experience) with 9+ years (or commensurate experience).

• Approximately 5 years of experience in the implementation and support of Microsoft Information Protection technologies.

• Experience in administering Microsoft Purview Data Loss Prevention (DLP), Microsoft Information Protection (MIP), Sensitivity Labels, and Microsoft 365 Compliance and Security solutions.

• Experience supporting Controlled Unclassified Information (CUI) or similar information classification programs.

• Experience in developing and maintaining data protection policies and controls.

• Knowledge of Microsoft 365 security architecture and compliance capabilities.

• Experience in supporting security audits, regulatory assessments, or compliance programs.

• Strong analytical and troubleshooting abilities.

• Exceptional written and verbal communication skills.

• Must be able to obtain and maintain an EPA Public Trust clearance.

• Preferred: Microsoft security certifications such as SC-400, SC-300, SC-900, AZ-104, or other Azure certifications.

• Preferred: Experience in supporting Microsoft Copilot governance, security, and compliance initiatives.

• Preferred: Experience in developing custom Sensitive Information Types (SITs).

• Preferred: Familiarity with NIST 800-53, FISMA, and federal cybersecurity requirements.

• Preferred: Experience with SharePoint Online information protection capabilities.

• Preferred: Experience in creating security dashboards and reporting solutions using Qlik and/or Power BI.

• Preferred: Experience supporting large-scale document classification and labeling initiatives involving millions of documents.

• Preferred: ServiceNow administration or security integration experience.

• Preferred: Experience in supporting DLP or information protection requirements within ServiceNow environments.

• Preferred: Experience with Azure NetApp Files and associated security, storage, or compliance controls.

🏝️ Benefits

• [Details about benefits to be included here]

• [Additional benefits if applicable]