Microsoft Information Protection; MIP) Engineer

United States

Suitability/Public Trust

Fully remote

Information Technology

The Microsoft Information Protection (MIP) Engineer will support enterprise data protection initiatives focused on Data Loss Prevention (DLP), Microsoft Purview Information Protection, Controlled Unclassified Information (CUI) compliance, and emerging AI security technologies such as Microsoft Copilot. This role is responsible for designing, implementing, maintaining, and enhancing information protection controls that safeguard sensitive agency data while enabling secure collaboration and productivity.

The ideal candidate will possess approximately five years of experience administering Microsoft information protection technologies, with demonstrated expertise in DLP, sensitivity labels, data classification, compliance monitoring, and security policy implementation within complex enterprise environments. This position is located in Washington, DC, and will be fully remote.

• Design, implement, maintain, and optimize Microsoft Purview DLP policies across Microsoft 365 services.

• Develop and tune DLP controls to protect sensitive organizational data from unauthorized disclosure, accidental sharing, or data exfiltration.

• Analyze emerging technologies, including Microsoft Copilot, to assess impacts on existing DLP controls and recommend appropriate security enhancements.

• Support implementation of DLP controls for new business applications and platforms.

• Perform policy testing, validation, and user acceptance activities prior to production deployment.

• Investigate and resolve DLP-related incidents, alerts, and user support requests.

• Conduct periodic reviews of DLP policies to ensure continued effectiveness and compliance with organizational requirements.

• Collaborate with security, compliance, and business stakeholders to define and update DLP requirements.

• Administer and enhance Microsoft Purview Information Protection and Sensitivity Label programs.

• Design and manage sensitivity label taxonomies supporting Controlled Unclassified Information (CUI) and other data classification requirements.

• Develop and implement labeling strategies to improve enterprise data visibility and protection.

• Evaluate new Microsoft Information Protection features and determine suitability for organizational deployment.

• Support automated and manual document classification initiatives across large-scale enterprise environments.

• Develop controls that integrate sensitivity labels with DLP policies and other security technologies.

• Assist with SharePoint Online and document library labeling implementations.

• Evaluate Microsoft Copilot security capabilities and information protection controls.

• Develop strategies that leverage sensitivity labels and DLP policies to restrict access to sensitive information within Copilot prompts and responses.

• Assess risks related to AI-enabled information access and recommend mitigation approaches.

• Support deployment planning and governance activities related to enterprise AI initiatives.

• Support FISMA, OIG, and other compliance-related assessments.

• Assist in developing, testing, and deploying remediation efforts for audit findings.

• Create and maintain compliance evidence, system documentation, and security artifacts.

• Support development and testing of custom Sensitive Information Types (SITs) to meet organizational requirements.

• Collaborate with auditors, compliance personnel, and system owners during assessments and reviews.

• Contribute to NIST 800-53 control implementation and evidence collection activities

• Develop and maintain reporting solutions that provide visibility into DLP effectiveness, CUI adoption, and information protection trends.

• Create dashboards and metrics supporting executive and operational decision-making.

• Analyze security, labeling, and policy usage data to identify improvement opportunities.

• Support migration or modernization efforts associated with reporting platforms and analytics tools.

• Participate in regular meetings with customers, security teams, compliance personnel, and Microsoft representatives.

• Provide technical guidance and recommendations regarding information protection best practices.

• Support end-user adoption efforts through documentation, troubleshooting, and knowledge transfer.

Qualification

Bachelor’s degree in Information Technology,…