Technical Lead - Microsoft Purview & M365 Security

D-ploy is a dynamic IT and Engineering Solutions company operating across the EMEA region, including Switzerland, Germany, Czech Republic, Austria, the UK, and the USA. We are committed to delivering reliable and efficient services to our clients through strong partnerships and a people-focused culture.

We are looking for an experienced Technical Lead – Microsoft Purview & M365 Security to support the implementation of data protection and secure collaboration solutions within an international, highly regulated environment.

This role is ideal for someone with strong hands-on expertise in Microsoft Purview, Microsoft 365 security and information protection, who can combine technical implementation with the ability to guide stakeholders through complex security and compliance requirements.

You will take ownership of the technical delivery, working closely with project managers, business analysts, cybersecurity specialists and Microsoft 365 platform teams to design, implement and optimize information protection controls.

Key Responsibilities

• Lead the technical design and implementation of Microsoft Purview information protection and data classification solutions.
• Translate data classification policies into sensitivity labels, encryption settings, external sharing controls and Data Loss Prevention (DLP) policies.
• Design and implement security controls for confidential and restricted information, considering their impact on external collaboration, mobile devices, partner applications and Microsoft Copilot.
• Configure and manage sensitivity labels, auto-labelling, DLP policies and related Microsoft 365 security settings.
• Plan and execute proof-of-concept activities, coordinate testing, troubleshoot technical issues and document findings.
• Support phased deployments of information protection policies, monitoring their impact and identifying potential risks.
• Develop reporting and monitoring solutions using PowerShell, Microsoft Graph and Microsoft Purview to identify sensitive content, sharing risks and compliance gaps.
• Establish operational procedures for monitoring, incident handling, policy exceptions and ongoing configuration changes.
• Collaborate with cybersecurity and platform teams to ensure a smooth transition into ongoing operations.

Requirements

What We're Looking For

• 5+ years of experience in Microsoft 365 security, compliance or information protection engineering.
• Proven experience implementing Microsoft Purview information protection solutions in at least two production environments with 2,000+ users.
• Strong hands-on experience with Microsoft Purview, including sensitivity labels, auto-labelling, Data Loss Prevention (DLP) and encryption.
• In-depth knowledge of Microsoft 365 collaboration and sharing configurations across SharePoint, Teams and OneDrive.
• Experience with Microsoft Entra ID Conditional Access, PowerShell and Microsoft Graph.
• Ability to assess and explain the impact of encryption and security controls on external collaboration, mobile access and Microsoft Copilot.
• Experience working in regulated industries, preferably pharmaceuticals, life sciences or similar environments.
• Microsoft SC-401 certification (formerly SC-400) or equivalent practical experience.
• Strong analytical, troubleshooting and communication skills, with the ability to engage both technical and non-technical stakeholders.
• Fluency in English.
• Valid criminal record extract, not older than three months, required.

Nice to Have

• Experience developing automation scripts for large-scale data clean-up and remediation.
• Familiarity with Microsoft Defender for Cloud Apps.
• Experience identifying and remediating data oversharing risks associated with Microsoft Copilot.

Benefits

• Broad range of tasks and responsibilities 

• Friendly and international working environment 

• Professional development opportunities 

• Referral program (“Fishing for Friends”) 

• Company-sponsored events 

Is IT in your DNA?