Information Security Engineer - Microsoft Purview Specialist

Information Security Engineer - Microsoft Purview SpecialistJoin one of the nation's most comprehensive academic medical centers, UChicago Medicine as an Information Security Engineer - Microsoft Purview Specialist for the Information Security department. This is a remote, work from home opportunity, and you may be based outside of the greater Chicagoland area.The Microsoft Purview Specialist is responsible for the design, implementation, administration, monitoring, and continuous improvement of Microsoft Purview capabilities across the University of Chicago Medical Center Microsoft 365 environment.This role serves as a technical subject matter expert for data protection, information governance, compliance, investigation, and data lifecycle capabilities within Microsoft Purview. The position works closely with Information Security, Privacy, Legal, Records Management, Microsoft 365 engineering, endpoint management, and application teams to translate organizational, regulatory, and business requirements into scalable technical controls.The successful candidate will have hands-on experience administering Microsoft Purview in a complex enterprise environment and will understand how Purview capabilities interact with Microsoft 365 services including Exchange Online, SharePoint Online, OneDrive, Microsoft Teams, Microsoft 365 Apps, endpoints, and Microsoft Entra ID.Essential Job FunctionsAdminister and maintain Microsoft Purview capabilities across the Microsoft 365 environment.Design, configure, test, deploy, monitor, and tune Purview policies and controls.Develop standards, operational procedures, technical documentation, and governance documentation for Purview services.Information Protection and Classification.Design and maintain the organization's Microsoft Purview Information Protection strategy.Develop and manage sensitivity labels, label policies, publishing policies, protection settings, encryption controls, and related classification standards.Configure and maintain Sensitive Information Types, Exact Data Match classifiers, trainable classifiers, keyword dictionaries, and other classification mechanisms where appropriate.Develop DLP controls for Exchange Online, SharePoint Online, OneDrive, Microsoft Teams, Microsoft 365 applications, endpoints, and other supported workloads.Configure policy tips, notifications, user overrides, incident reporting, auditing, restriction, and blocking actions.Manage retention across Exchange Online, SharePoint Online, OneDrive, Teams, and other supported Microsoft 365 workloads.Support evaluation, implementation, and administration of Microsoft Purview Insider Risk Management and Communication ComplianceDevelop operational metrics and reporting for Purview controls.Participate in development of enterprise information-protection and data-governance standards.Develop and maintain PowerShell and Microsoft Graph automation used to administer, report on, validate, and monitor Microsoft Purview configurations.Automate repetitive administrative and reporting processes where supported.Develop scripts and tooling for configuration assessment, policy validation, reporting, and operational support.Maintain source-controlled scripts and supporting technical documentation.Required QualificationsBS or BA degree in computer science, engineering, or equivalent education, training or work experience; master's degree preferredStrong hands-on experience administering Microsoft Purview in a production Microsoft 365 environmentStrong knowledge of Microsoft Purview Data Loss PreventionStrong knowledge of Microsoft Purview Information Protection, sensitivity labels, sensitive information types, and classification technologiesExperience with Microsoft Purview Data Lifecycle Management and retentionExperience supporting Microsoft Purview Audit and eDiscoveryStrong understanding of Exchange Online, SharePoint Online, OneDrive, Microsoft Teams, and Microsoft 365 AppsUnderstanding of Microsoft Entra ID identity, groups, roles, and access-control conceptsExperience administering Microsoft 365 using PowerShellExperience troubleshooting enterprise Microsoft 365 policy and configuration issuesExperience creating technical documentation, operational procedures, and governance standardsAbility to translate security, privacy, regulatory, legal, and business requirements into technical configurationsStrong analytical and troubleshooting skillsPreferred QualificationsExperience supporting Microsoft 365 in a healthcare environmentExperience implementing data-protection controls involving PHI and PIIKnowledge of HIPAA and healthcare data-protection requirementsExperience with Microsoft Purview Endpoint DLPExperience with Microsoft Purview Insider Risk ManagementExperience with Microsoft Purview Communication ComplianceExperience with Microsoft Purview Records ManagementExperience with advanced Microsoft Purview eDiscovery workflowsExperience with Exact Data Match, trainable classifiers, custom Sensitive Information Types, and advanced classification techniquesExperience with Microsoft Graph and automationExperience with Microsoft Intune, Microsoft Defender, and Microsoft Entra IDExperience working within formal change-management and enterprise governance processesExperience operating Microsoft 365 in a large, regulated enterprisePosition DetailsJob Type/FTE: Full Time (1.0 FTE)Shift: DayLocation: RemoteUnit/Department: Information SecurityCBA Code: Non-Union