Note: The job is a remote job and is open to candidates in USA. Taxwell is a digital tax filing platform formed from Drake Software and TaxAct that provides professional and do-it-yourself tax preparation products. The Senior Microsoft Purview Security Engineer will design, implement, administer, and improve Microsoft Purview and related data-protection and compliance technologies across the enterprise. The role focuses on information protection, data loss prevention, governance, records management, eDiscovery, and safeguarding sensitive taxpayer and business information.
Responsibilities
- Lead Microsoft Purview and data-protection projects from requirements gathering and solution design through implementation, testing, documentation, and production deployment
- Deploy, configure, administer, and optimize Microsoft Purview and its integrations with Microsoft 365, Microsoft Entra ID, Azure, endpoints, and other enterprise platforms
- Design and implement enterprise data-classification, sensitivity-labeling, encryption, and data loss prevention policies
- Develop automated and trainable classifiers for taxpayer information, financial data, personally identifiable information, credentials, intellectual property, and other regulated or sensitive information
- Configure and maintain DLP controls across Exchange Online, SharePoint, OneDrive, Teams, endpoints, and supported cloud applications
- Administer Purview role groups, custom roles, permissions, administrative boundaries, and least-privilege access
- Configure and maintain Information Protection, Data Loss Prevention, Data Lifecycle Management, Records Management, Audit, and Communication Compliance capabilities
- Support eDiscovery workflows, including preservation, legal holds, collections, searches, review sets, exports, and coordination with Legal and Privacy teams
- Develop and maintain retention labels, retention policies, disposition requirements, and records-management controls based on legal, regulatory, privacy, and business requirements
- Implement technical controls supporting IRS 7216 restrictions on the unauthorized use or disclosure of tax-return information
- Implement least-privilege access, access reviews, audit logging, encryption, DLP, retention, and data-handling controls for taxpayer information
- Help prevent unauthorized sharing of taxpayer information with internal users, external recipients, service providers, cloud applications, and other third parties
- Maintain auditable evidence of policy configuration, administrative activity, access, sharing, labeling, retention, and approved data-handling exceptions
- Design controls that distinguish tax-return preparation activities from secondary uses of taxpayer information, including analytics, marketing, product development, artificial intelligence, and other non-preparation purposes
- Conduct regular assessments of Purview configurations, data-governance practices, permissions, policy coverage, exceptions, and control effectiveness
- Test policies before production deployment and tune configurations to reduce unnecessary business disruption while maintaining required protection
- Troubleshoot Purview service, policy, integration, permission, and data-classification issues
- Monitor platform health, policy deployment status, scanner coverage, connector status, and integration performance
- Develop PowerShell and Python automation for policy administration, reporting, access reviews, configuration validation, evidence collection, and other repeatable governance activities
- Create dashboards and reports showing sensitive-data locations, policy coverage, labeling adoption, DLP trends, access risks, retention status, and compliance gaps
- Integrate Purview with Microsoft Defender XDR, Microsoft Entra ID, Azure, AWS, and other security or data platforms where appropriate
- Collaborate with data architects, application owners, developers, IT, cloud engineering, Security, Legal, Privacy, and GRC teams to strengthen data governance and protection
- Evaluate new applications, integrations, cloud services, and AI use cases for sensitive-data handling and Purview control requirements
- Create and maintain technical designs, configuration standards, operating procedures, data-flow documentation, control mappings, and administrator guidance
- Provide training and technical support to administrators, data owners, business users, Legal, Privacy, and Compliance stakeholders
- Willingness to explore creative AI solutions within Microsoft ecosystem
Skills
- • Five or more years of experience in security engineering, data security, data governance, Microsoft 365 administration, compliance engineering, or a related field
- • Hands-on experience deploying and administering Microsoft Purview in an enterprise Microsoft 365 environment
- • Experience with Purview Information Protection, sensitivity labels, Data Loss Prevention, Data Lifecycle Management, Records Management, Audit, and eDiscovery
- • Strong understanding of data classification, data governance, privacy, retention, encryption, least privilege, and compliance-control design
- • Experience administering Microsoft 365 and Microsoft Entra ID roles, permissions, groups, identities, and access controls
- • Ability to design, test, implement, document, and maintain security and compliance policies
- • Experience assessing business and regulatory requirements and translating them into technical controls
- • Experience implementing controls for sensitive financial, tax, customer, or personally identifiable information
- • Experience implementing or integrating security and data-protection capabilities in Microsoft Azure and/or AWS
- • Strong troubleshooting, analytical, project-management, and technical-documentation skills
- • Excellent written and verbal communication skills, including the ability to explain technical controls to Legal, Privacy, Compliance, and business stakeholders
- • Highly self-motivated, able to manage competing priorities, and comfortable operating independently in a fast-paced environment
- • Remote position available to candidates located in the United States
- • Occasional planned work outside normal business hours may be required for major platform deployments, migrations, or maintenance activities
- • Experience supporting a tax-preparation, financial-services, accounting, consulting, software, or other highly regulated organization
- • Familiarity with IRS taxpayer-data safeguarding guidance, the FTC Safeguards Rule, and written information security plan requirements applicable to tax-return preparers
- • Experience with Microsoft Defender XDR, Defender for Cloud Apps, Microsoft Sentinel, and CrowdStrike Falcon integrations
- • Experience integrating Purview controls with SaaS applications, cloud storage, data platforms, and custom business applications
- • Familiarity with APIs, Microsoft Graph, infrastructure-as-code, and configuration-management practices
- • Microsoft certifications such as SC-400, SC-300, MS-102, or comparable data-security, privacy, or cloud certifications
- • Bachelor's degree in cybersecurity, information technology, computer science, information systems, or a related discipline, or equivalent professional experience
Benefits
- Remote position available to candidates located in the United States.
- A supportive, open, and inclusive atmosphere and a team that values your contributions.
Company Overview