Microsoft 365 / Purview Security Architect || Remote

Role: Microsoft 365 / Purview Security Architect

Location: Remote with possible limited travel

Duration: Long Term Contract

 

Microsoft 365 / Purview Security Architect** to design security, compliance, labeling, DLP, and governance recommendations for a public-sector legal environment. This person will focus on Microsoft 365 G5 capabilities, Purview optimization, endpoint protection alignment, and controls for sensitive legal and investigative data.

 

This is an **advisory architecture role**, not a daily admin or support role.

 

Key Responsibilities

* Assess Microsoft 365 tenant configuration, licensing usage, and security posture.

* Design DLP, retention, labeling, and information protection strategies using Microsoft Purview.

* Define data classification standards for sensitive legal and investigative information.

* Recommend RBAC models, role segregation, and access governance controls.

* Evaluate and recommend controls for eDiscovery Premium, Review Sets, audit, legal hold, and data boundaries.

* Support endpoint governance recommendations in coordination with Intune and device compliance strategy.

* Identify risks related to over-privileged access, overbroad search access, unmanaged data movement, and exfiltration.

* Produce architecture diagrams, control recommendations, and plain-language design documents.

* Participate in procurement support by defining technical requirements and reviewing vendor proposals for compliance and feasibility.

 

Required Qualifications

* 8+ years of experience in Microsoft security and compliance architecture.

* Deep hands-on knowledge of:

* Microsoft Purview

* DLP

* Information Protection / sensitivity labeling

* eDiscovery Premium

* retention and records management

* RBAC / least privilege

* audit and compliance features

* Microsoft Intune

* Experience designing governance for M365 in enterprise or government environments.

* Ability to translate technical controls into clear policy and design guidance.

* Experience writing security architecture documents and technical requirements.

 

Preferred Qualifications

* Public-sector, justice, legal, or law-enforcement environment experience

* Experience supporting regulated data, privileged data, or investigative workflows

* Familiarity with CJIS-aligned security expectations

* Microsoft certifications in security, compliance, or Azure

* Experience with executive briefings and advisory engagements

 

What Success Looks Like

* Can walk an agency through exactly how M365 and Purview should be governed

* Understands legal-hold, sensitive search controls, and confidentiality risks

* Produces practical recommendations, not generic Microsoft feature lists

 

 

 

Thanks & regards, Sonu Chauhan Sr. Technical Recruiter

571-678-0927  sonu.chauhan@1rpo.net