M365 Purview Architect
apex systemsPennington (NJ)
M365 Purview Architect
Posted 6 days ago
apex systemsPennington (NJ)
SENIORITY
Lead
About the role
M365 Purview / MIP / Compliance Architect A Microsoft 365 Security & Compliance Architect is sought to support enterprise security, compliance, information protection, and governance initiatives within Microsoft 365. This position will focus on Microsoft Purview, Microsoft Information Protection (MIP), Data Loss Prevention (DLP), Security & Compliance controls, Communication Compliance, Threat Management, and M365 security technologies. The ideal candidate will have hands-on engineering experience and be capable of designing and implementing enterprise-level security controls across Microsoft 365 workloads.
Location:
Charlotte, North Carolina, Plano, Texas, Jacksonville, Florida or Pennington, NJ (Hybrid)
Key Responsibilities:
Design and implement Microsoft Purview security and compliance solutions. Configure and manage Microsoft Information Protection (MIP) capabilities. Develop and maintain Data Loss Prevention (DLP) policies across Exchange Online, SharePoint Online, OneDrive, and Microsoft Teams. Build and maintain sensitivity labeling and data classification frameworks. Support Microsoft 365 security governance and compliance initiatives. Partner with audit, risk, compliance, and security teams to implement regulatory controls. Configure and support Communication Compliance solutions. Analyze security posture and identify opportunities to strengthen information protection controls. Participate in threat management and security investigations utilizing Microsoft security tooling. Contribute to security architecture decisions and provide technical guidance on M365 security best practices. Assist with security policy development, governance documentation, and compliance reporting. Support Copilot and AI governance initiatives through information protection and security controls.
Must-Have:
Skills & Experience Microsoft Purview Hands-on experience implementing Microsoft Purview solutions. Experience with Data Classification, Sensitivity Labels, Auto-labeling, Information Protection, Compliance Controls, and Audit and Reporting. Microsoft Information Protection (MIP) Experience configuring and managing Sensitivity Labels, Encryption Policies, Document Protection, Email Protection, and Data Classification Frameworks. Data Loss Prevention (DLP) Experience designing and implementing DLP policies across Exchange Online, SharePoint Online, OneDrive, and Microsoft Teams. Understanding of enterprise data protection and regulatory compliance requirements. Microsoft 365 Security Engineering experience with the Microsoft Defender ecosystem, Threat Management, Security Operations concepts, incident investigation and response, and secure collaboration controls. Compliance & Governance Experience supporting compliance and audit programs. Knowledge of information governance and enterprise data protection requirements. Experience developing security standards, policies, and compliance documentation. Microsoft 365 Platform Experience with Exchange Online, SharePoint Online, Teams, OneDrive, Entra ID, Conditional Access, Identity Governance, and Role-Based Access Control (RBAC).
Preferred Skills:
Communication Compliance Microsoft Defender for Office 365 Compliance Manager Insider Risk Management eDiscovery Copilot Governance PowerShell automation Microsoft Graph Security architecture experience in regulated environments Financial services or banking experience
Before you apply
Applying takes about a minute. These four things decide how fast it moves after that.
Your profile is current
It's what we read first. Occupations, seniority and locations matter more than a long history.
Two examples you can talk through
Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.
A number in mind
What you're on now and what would make you move. We negotiate better when we know both.
Your notice period
Employers plan around it, and it's the question that stalls offers most often.
Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.