Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 3 days ago

Data Protection and Microsoft Purview Engineer

carlyle17 open roles

Where
Washington DC
Work mode
Hybrid
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowData Protection and Microsoft Purview Engineercarlyle · Washington DC

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on carlyle's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

11.5% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 2.1%1 day
  2. 4.4%3 days
  3. 11.5%7 days
  4. 18.1%14 days
  5. 35.6%30 days
  6. 44.6%60 days
This job: posted 3 days ago

The posting

Position Summary

The Data Protection and Microsoft Purview Engineer is a senior technical leader responsible for designing, implementing, and continuously enhancing the organization's enterprise data protection capabilities. This hands-on role serves as the technical authority for Microsoft Purview, leading the operational management of Data Loss Prevention (DLP), Insider Risk Management, Information Protection, Data Security Posture Management (DSPM), and related Microsoft security technologies. Working closely with Security Operations, Infrastructure, Cloud Engineering, Compliance, Legal, Risk, and business stakeholders, the engineer develops scalable solutions that protect the firm's most sensitive information while enabling secure business collaboration and innovation.

The successful candidate combines deep technical expertise with strategic thinking to build and mature enterprise data protection capabilities across Microsoft 365, Azure, endpoints, cloud applications, and emerging AI technologies. This role is responsible for translating security and regulatory requirements into effective technical controls, developing enterprise-wide policies and standards, leading complex implementations, and driving continuous improvements through automation, analytics, and operational excellence. The engineer serves as the technical lead for high-impact initiatives, providing architecture guidance, troubleshooting complex issues, mentoring engineers, and establishing best practices for protecting sensitive data throughout its lifecycle.

As a key member of the cybersecurity organization, the Data Protection and Microsoft Purview Engineer partners with cross-functional teams to identify and reduce data protection risks, investigate complex security events, and enhance the organization's overall security posture. The role requires a proactive, innovation-focused mindset with a strong emphasis on automation, operational efficiency, and emerging technologies, including AI-powered security capabilities. The ideal candidate is passionate about solving complex technical challenges, influencing enterprise security strategy through technical expertise, and delivering resilient, scalable data protection solutions that support business objectives while maintaining the highest standards of information security and regulatory compliance.

In-Office Requirement: 4 days per week

Primary Responsibilities

Core Responsibilities

  • Assessing firm data governance and compliance environments and developing recommendations for Microsoft Purview capabilities, including Data Loss Prevention, Compliance Manager, and Information Protection.
  • Designing and implementing Microsoft Purview solutions to support data classification, labeling, retention, investigation, and governance requirements across enterprise environments.
  • Performing technical health checks, discovery, and remediation activities for Microsoft Purview deployments, including audit, privileged access, and policy configuration reviews.
  • Supporting proof of concept, deployment, integration, and post-implementation activities for Microsoft Purview and adjacent Microsoft security and compliance technologies.

Microsoft Purview - 50%

  • Expert knowledge of Microsoft Purview Data Loss Prevention (DLP), Insider Risk Management, and Information Protection.
  • Experience designing, deploying, and administering Microsoft Purview policies across Microsoft 365, Windows endpoints, Exchange Online, SharePoint Online, OneDrive, Microsoft Teams, and supported cloud applications.
  • Strong understanding of Microsoft Purview architecture, licensing, role-based administration, and compliance portal configuration.
  • Experience integrating Microsoft Purview with Microsoft Defender, Microsoft Entra ID, Microsoft Sentinel, and other Microsoft security technologies.

Data Loss Prevention DLP - 30%

  • Design, implement, and maintain enterprise DLP policies to prevent unauthorized disclosure of sensitive information.
  • Develop DLP controls for email, endpoint devices, cloud applications, Microsoft Teams, SharePoint, OneDrive, and web uploads.
  • Configure policy tips, user notifications, incident reporting, and automated remediation workflows.
  • Tune DLP policies to reduce false positives while maintaining effective protection.
  • Experience using Sensitive Information Types (SITs), Exact Data Match (EDM), trainable classifiers, and custom classifiers.

Data Security Posture Management (DSPM) - 20%

  • Experience implementing or supporting Microsoft Purview Data Security Posture Management (DSPM).
  • Assess organizational data exposure and identify risks across Microsoft 365, Azure, and connected SaaS platforms.
  • Interpret DSPM recommendations and translate them into actionable DLP, Insider Risk, and Information Protection controls.
  • Monitor data security posture metrics and continuously improve policy coverage and risk reduction.

Requirements

Education & Certificates

  • Bachelor's degree, required
  • Concentration in cybersecurity, computer science, information systems, engineering or a related discipline, or equivalent relevant professional experience.
  • Advanced degree in a related discipline is preferred.

Preferred Qualifications

  • Microsoft SC-400: Information Protection Administrator Associate.
  • Microsoft SC-401: Information Security Administrator (or equivalent current certification).
  • Microsoft SC-100: Cybersecurity Architect Expert (preferred).
  • Experience with Microsoft Defender XDR, Microsoft Sentinel, Microsoft Entra ID, and Microsoft 365 E5 Security.
  • Experience implementing AI governance and protecting Microsoft 365 Copilot and other AI services using Microsoft Purview.

Competencies & Attributes

  • Data Protection ConceptsStrong understanding of enterprise data protection principles, including:Data Loss Prevention (DLP) Data Security Posture Management (DSPM) Data Classification Data Discovery Data Governance Information Protection Sensitivity Labels Data Lifecycle Management Encryption technologies Least Privilege and Zero Trust security models Knowledge of structured and unstructured data protection strategies.
  • Information ProtectionDesign and Manage Microsoft Purview Sensitivity Labels and Label Policies. Configure automatic and recommended labeling. Implement encryption and rights management for sensitive corporate information. Support secure collaboration while protecting confidential data.
  • Monitoring and Incident ResponseMonitor DLP and Insider Risk alerts and perform root cause analysis. Investigate policy violations and coordinate remediation efforts. Develop dashboards and reports to measure program effectiveness. Identify opportunities for automation and operational efficiency.
  • Compliance & GovernanceFamiliarity with regulatory and industry frameworks including:GDPR CCPA HIPAA PCI DSS SOX NIST ISO 27001 Ability to align technical controls with compliance requirements.

Benefits/Compensation

The compensation range for this role is specific to Washington, DC and New York, NY and takes into account a wide range of factors including but not limited to the skill sets required/preferred; prior experience and training; licenses and/or certifications.

The anticipated base salary range for this role is $160,000 to $180,000.

In addition to the base salary, the hired professional will enjoy a comprehensive benefits package spanning retirement benefits, health insurance, life insurance and disability, paid time off, paid holidays, family planning benefits and various wellness programs. Additionally, the hired professional may also be eligible to participate in an annual discretionary incentive program, the award of which will be dependent on various factors, including, without limitation, individual and organizational performance.

Due to the high volume of candidates, please be advised that only candidates selected to interview will be contacted by Carlyle.

​

​

​

Who We Are

When people, ideas, and capital come together, opportunity expands across private markets. At Carlyle, this belief has shaped how we invest for decades, fueling growth for companies and delivering performance for investors.

Visit our website to learn more about our firm and the ways our platform is shaping private markets.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against carlyle's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on carlyle's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    carlyle's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.