Capgemini Government Solutions (CGS) LLC is seeking a hands-on Data Protection Engineer (Purview) to design, implement, and manage Data Loss Prevention (DLP) and data classification capabilities within Microsoft Purview. This role is responsible for safeguarding sensitive data (PII, PHI, CUI) through automated protection controls, labeling frameworks, and policy enforcement across Microsoft 365 environments.

Job Responsibilities:

• Design, implement, and maintain Microsoft Purview DLP policies to prevent data leakage across Exchange, SharePoint, Teams, and endpoints
• Develop and manage sensitivity labeling and classification taxonomy, ensuring accurate identification and protection of sensitive data
• Configure and tune Sensitive Information Types (SITs) and detection rules to reduce false positives and improve data visibility
• Monitor and respond to DLP alerts, policy violations, and potential data exfiltration risks
• Partner with security, privacy, and legal teams to align data protection controls with NIST 800-53, HIPAA, and GDPR requirements
• Automate policy deployment and enforcement using PowerShell and Purview APIs
• Support user education and adoption of data classification policies, ensuring proper labeling and handling of sensitive data
• Generate reports and insights on data protection posture and compliance metrics

Required qualifications:

• Active Secret clearance required.
• Bachelor's degree in a technical field (or equivalent experience)
• 4+ years of experience in cybersecurity, data protection, or systems engineering
• 2+ years of hands-on experience with Microsoft Purview (DLP, Information Protection, Sensitivity Labels)
• Strong knowledge of data classification, labeling strategies, and information protection frameworks
• Experience implementing DLP controls to detect and prevent unauthorized data sharing
• Proficiency in PowerShell scripting for automation
• Familiarity with compliance frameworks (NIST, HIPAA, GDPR)

Preferred Qualifications:

• Experience in GCC High or regulated federal environments
• Knowledge of KQL or security analytics tools (e.g., Sentinel)
• Microsoft security or compliance certifications
• Security+ CE desired.

Disclaimer

All qualified applicants will be considered for employment based on their skills, and merit.

Please be aware that Capgemini may capture your image (video or screenshot) during the interview process and that image may be used for verification, including during the hiring and onboarding process.

Applicants for employment in the US must have valid work authorization that does not now and/or will not in the future require sponsorship of a visa for employment authorization in the US by Capgemini.

Capgemini discloses salary range information in compliance with state and local pay transparency obligations. The disclosed range represents the lowest to highest salary we, in good faith, believe we would pay for this role at the time of this posting, although we may ultimately pay more or less than the disclosed range, and the range may be modified in the future. The disclosed range takes into account the wide range of factors that are considered in making compensation decisions including, but not limited to, geographic location, relevant education, qualifications, certifications, experience, skills, seniority, performance, sales or revenue-based metrics, and business or organizational needs. At Capgemini, it is not typical for an individual to be hired at or near the top of the range for their role. The base salary range for the tagged location is $100K-$120K.

This role may be eligible for other compensation including variable compensation, bonus, or commission. Full time regular employees are eligible for paid time off, medical/dental/vision insurance, 401(k), and any other benefits to eligible employees.

Note: No amount of pay is considered to be wages or compensation until such amount is earned, vested, and determinable. The amount and availability of any bonus, commission, or any other form of compensation that are allocable to a particular employee remains in the Company's sole discretion unless and until paid and may be modified at the Company's sole discretion, consistent with the law.