Microsoft Purview & Security Architect — Contract
Description
Role Overview
Spyglass Solutions seeks a senior, client-facing Microsoft Purview & Security Architect to lead assessments, workshops, pilots, implementations, and operationalization engagements across multiple client projects at any given time. This hands-on trusted advisor will translate business and regulatory needs into practical designs across Microsoft Purview, Entra ID, Microsoft Security, data governance, compliance, Copilot, and AI governance; configure and validate solutions; balance competing priorities and deadlines; and enable sustainable adoption with minimal oversight.
Key Responsibilities
• Lead discovery, stakeholder interviews, assessments, design workshops, whiteboarding, and implementation workstreams with executive, security, compliance, data governance, IT, and business teams.
• Design, configure, test, and optimize Microsoft Purview across Microsoft 365, endpoints, cloud, and structured data, including Information Protection, DLP, sensitivity labels, DSPM, Insider Risk, Communication Compliance, Records Management, eDiscovery, Retention, Compliance Manager, Sensitive Information Types, Exact Data Match, document fingerprinting, and trainable classifiers.
• Develop classification, labeling, retention, protection, and governance strategies aligned with business, privacy, regulatory, and security requirements. Establish testing, investigations, audit evidence, incident workflows, documentation, and ongoing tuning.
• Assess Microsoft 365 Copilot, Copilot Studio, Microsoft Foundry, enterprise AI applications, and custom or third-party agents. Define governance for prompts, outputs, grounding data, access, retention, monitoring, auditability, approvals, exceptions, escalation, change control, incident response, and retirement.
• Build enterprise data-governance operating models, including charters, policies, standards, decision rights, roadmaps, stewardship, councils, glossaries, data domains, metadata, lineage, quality, procedures, training, and knowledge transfer.
• Design Zero Trust and access-governance recommendations using Entra ID, Conditional Access, MFA, Identity Governance, Access Reviews, PIM, external identities, application consent, service principals, managed identities, and authentication methods. Align identity, device, application, endpoint, network, and data controls; integrate Purview with Defender, Sentinel, and Intune where in scope.
• Produce customer-ready architectures, findings, roadmaps, configuration guides, governance models, runbooks, test plans, training, and executive presentations. Lead pilots, MVPs, production deployments, validation, tuning, handoff, status reporting, risk management, and escalation.