Information Security Engineer - Microsoft Purview Specialist

Join one of the nation’s most comprehensive academic medical centers, UChicago Medicine as an Information Security Engineer - Microsoft Purview Specialist for the Information Security department. This is a remote, work from home opportunity, and you may be based outside of the greater Chicagoland area.

The Microsoft Purview Specialist is responsible for the design, implementation, administration, monitoring, and continuous improvement of Microsoft Purview capabilities across the University of Chicago Medical Center Microsoft 365 environment.

This role serves as a technical subject matter expert for data protection, information governance, compliance, investigation, and data lifecycle capabilities within Microsoft Purview. The position works closely with Information Security, Privacy, Legal, Records Management, Microsoft 365 engineering, endpoint management, and application teams to translate organizational, regulatory, and business requirements into scalable technical controls.

The successful candidate will have hands-on experience administering Microsoft Purview in a complex enterprise environment and will understand how Purview capabilities interact with Microsoft 365 services including Exchange Online, SharePoint Online, OneDrive, Microsoft Teams, Microsoft 365 Apps, endpoints, and Microsoft Entra ID.

Essential Job Functions

Administer and maintain Microsoft Purview capabilities across the Microsoft 365 environment.

Design, configure, test, deploy, monitor, and tune Purview policies and controls.

Develop standards, operational procedures, technical documentation, and governance documentation for Purview services.

Information Protection and Classification.

Design and maintain the organization's Microsoft Purview Information Protection strategy.

Develop and manage sensitivity labels, label policies, publishing policies, protection settings, encryption controls, and related classification standards.

Configure and maintain Sensitive Information Types, Exact Data Match classifiers, trainable classifiers, keyword dictionaries, and other classification mechanisms where appropriate.

Develop DLP controls for Exchange Online, SharePoint Online, OneDrive, Microsoft Teams, Microsoft 365 applications, endpoints, and other supported workloads.

Configure policy tips, notifications, user overrides, incident reporting, auditing, restriction, and blocking actions.

Manage retention across Exchange Online, SharePoint Online, OneDrive, Teams, and other supported Microsoft 365 workloads.

Support evaluation, implementation, and administration of Microsoft Purview Insider Risk Management and Communication Compliance

Develop operational metrics and reporting for Purview controls.

Participate in development of enterprise information-protection and data-governance standards.

Develop and maintain PowerShell and Microsoft Graph automation used to administer, report on, validate, and monitor Microsoft Purview configurations.

Automate repetitive administrative and reporting processes where supported.

Develop scripts and tooling for configuration assessment, policy validation, reporting, and operational support.

Maintain source-controlled scripts and supporting technical documentation.

Required Qualifications

BS or BA degree in computer science, engineering, or equivalent education, training or work experience; master’s degree preferred

Strong hands-on experience administering Microsoft Purview in a production Microsoft 365 environment

Strong knowledge of Microsoft Purview Data Loss Prevention

Strong knowledge of Microsoft Purview Information Protection, sensitivity labels, sensitive information types, and classification technologies

Experience with Microsoft Purview Data Lifecycle Management and retention

Experience supporting Microsoft Purview Audit and eDiscovery

Strong understanding of Exchange Online, SharePoint Online, OneDrive, Microsoft Teams, and Microsoft 365 Apps

Understanding of Microsoft Entra ID identity, groups, roles, and access-control concepts

Experience administering Microsoft 365 using PowerShell

Experience troubleshooting enterprise Microsoft 365 policy and configuration issues

Experience creating technical documentation, operational procedures, and governance standards

Ability to translate security, privacy, regulatory, legal, and business requirements into technical configurations

Strong analytical and troubleshooting skills

Preferred Qualifications

Experience supporting Microsoft 365 in a healthcare environment

Experience implementing data-protection controls involving PHI and PII

Knowledge of HIPAA and healthcare data-protection requirements

Experience with Microsoft Purview Endpoint DLP

Experience with Microsoft Purview Insider Risk Management

Experience with Microsoft Purview Communication Compliance

Experience with Microsoft Purview Records Management

Experience with advanced Microsoft Purview eDiscovery workflows

Experience with Exact Data Match, trainable classifiers, custom Sensitive Information Types, and advanced classification techniques

Experience with Microsoft Graph and automation

Experience with Microsoft Intune, Microsoft Defender, and Microsoft Entra ID

Experience working within formal change-management and enterprise governance processes

Experience operating Microsoft 365 in a large, regulated enterprise

Position Details

Job Type/FTE: Full Time (1.0 FTE)

Shift: Day

Location: Remote

Unit/Department: Information Security

CBA Code: Non-Union

Originally posted on Himalayas