M365/Azure Engineer
What you'd do
The Office of Information Technology is seeking applicants for their IT Specialist (INFOSEC) (M365/Azure Engineer) position. As a M365/Azure Engineer, you will be supporting Microsoft Purview compliance and governance across SEC M365 tenants by managing DLP, retention, sensitivity labeling, eDiscovery, and audit logging configurations. Ensuring secure, compliant data handling and partnering with security, legal, and engineering teams to maintain regulatory and operational oversight.
Major duties
In this role as a M365/Azure Engineer, you will be responsible for: Managing Purview DLP policies, sensitivity labels, and retention configurations to meet SEC compliance and governance requirements. Reviewing and analyzing Purview audit logs to identify unusual activity, support investigations, and meet security and reporting obligations. Administering Purview eDiscovery cases, legal holds, and permissions to support legal, FOIA, and investigative workflows. Coordinating with security and operations teams to respond to compliance alerts, user-risk events, and policy enforcement actions. Maintaining Purview governance configurations across M365 tenants by validating policy posture, monitoring enforcement, and documenting changes.
What you need to qualify
Applicants are responsible for confirming all required materials are submitted by the closing date of the announcement. Please check the How You Will Be Evaluated and Required Documents sections carefully, as missing documents will render the application incomplete and ineligible for review. Qualifying experience may be obtained in the private or public sector. Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional, philanthropic, religious, spiritual, community, student, social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience. All qualification requirements must be met by the closing date of this announcement. BASIC REQUIREMENT: For all positions individuals must have IT-related experience demonstrating each of the four competencies listed below: Attention to Detail - Is thorough when performing work and conscientious about attending to detail. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations. MINIMUM QUALIFICATION REQUIREMENT: In addition to meeting the basic requirement, applicants must also meet the minimum qualification requirement below. SK-13: Applicant must have at least one year of specialized experience equivalent to the GS/SK-12 level: Administering Microsoft Purview compliance and governance capabilities; Reviewing and analyzing Microsoft Purview audit logs; and Configuring and maintaining Purview eDiscovery, Insider Risk and retention policies. ACCOMPLISHMENT RECORD COMPETENCIES: Your Accomplishment Record narratives should address the following competencies. See the How You Will Be Evaluated section below for more information: Infrastructure Design: Uses and implements architecture and topology of software, hardware, and networks, including LANS, WANS, SAN, and telecommunications systems, their components and associated protocols and standards, and how they operate and integrate with one another and with associated controlling software. Requirements Identification and Management: Uses principles and methods to identify, analyze, specify, design, and manage functional requirements through to user acceptance; includes translating functional requirements into technical requirements used for logical design, managing the systems lifecycle, and presenting alternative technologies or approaches. Information System Ownership: Implements and uses methods, tools, and procedures, including the development of information security plans and standards, to facilitate the technical operation of agency systems, prevent information systems vulnerabilities, and provide or restore privacy and security of applications and information systems. Technical Communication: Translates technical information into non-technical terms and accurately convey technical information to end users (e.g., staff, management) and outside parties, including the technical documentation of applications, systems, Standard Operating Procedures, etc.
Before you apply
Federal applications are different: your resume should be 3–5 pages and mirror the language of this announcement. Read our federal resume guide first — it's the #1 reason qualified people get screened out.
Don't miss the next one.
Get an email the moment a similar federal job opens — postings can close in as little as 5 days.