Data Protection and Management Engineer

Dentons

. Operate the Firm's DSPM platform and onboard and maintain data sources across Microsoft 365, the document management system, file shares, and cloud infrastructure .

Posted 10/14/2026full-timeUnited StatesMid-LevelSenior💰 $120,000 - $145,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in data protection and information security, with a strong focus on data loss prevention, classification, and compliance within legal environments. Proficient in managing data governance platforms and implementing retention policies while ensuring adherence to client confidentiality standards.

Highest-signal resume keywords

Data Loss PreventionMicrosoft PurviewInformation SecurityData ClassificationRetention Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Data ProtectionData ClassificationData GovernanceData Loss Prevention PoliciesRetention SchedulesData Lifecycle ManagementEDiscoveryScriptingAutomationData Exposure Measurement

Soft Skills

Strong Written CommunicationStakeholder Engagement

Tools & Technologies

Microsoft 365Document Management SystemsCloud InfrastructureInsider Risk ManagementEmail Security GatewaysGenerative AI Tools

Certifications & Qualifications

Microsoft SC-401Microsoft SC-200CISSPCIPTIGP

Industry Keywords

Legal Document ManagementClient ConfidentialityProfessional ServicesAccess ManagementCompliance

Tech Stack

Tools & technologies

Cloud

About the role

Key responsibilities & impact

Operate the Firm's DSPM platform and onboard and maintain data sources across Microsoft 365, the document management system, file shares, and cloud infrastructure
Tune discovery and classification accuracy and report on sensitive data location, exposure, and entitlement sprawl
Partner with infrastructure, application, and practice support teams to remediate overshared repositories, excessive permissions, orphaned accounts, and unmanaged data stores
Track remediation to closure and measure reduction in data exposure over time
Author, test, and tune data loss prevention policies across email, endpoint, cloud applications, browser, and removable media
Manage exception and business-justification workflows, triage and investigate alerts, and reduce false positives
Implement the Firm's retention schedule with Records and Information Governance
Configure retention labels and policies, support disposition review and defensible destruction, and ensure legal holds suspend retention where required
Identify aging and duplicate data, support decommissioning of legacy repositories, and report on volume under management and storage reclaimed
Support document management system security policy management, ethical walls, access management, need-to-know security models, matter-level provisioning, access requests, access reviews, recertification, and client-audit evidence
Operate Microsoft Purview Insider Risk Management, Information Protection, and Information Rights Management
Build and tune policies for departing timekeepers, lateral hires, data staging, and exfiltration
Apply data protection controls to generative AI and collaboration tools, define prompt and output handling guardrails, and evaluate emerging tooling
Reduce manual effort through scripting and automation across policy deployment, label and retention operations, alert enrichment, evidence collection, and reporting
Identify opportunities to apply AI to classification, investigation, and triage workflows
Participate in occasional off-hours maintenance windows, an on-call rotation for data protection escalations, and limited travel to Firm offices

Requirements

What you’ll need

Bachelor's degree in information technology, computer science, or a related field, or equivalent practical experience
4+ years of experience in data protection, information security, or a closely related infrastructure discipline
At least 2 years of hands-on work with data loss prevention, data classification, or insider risk tooling
Hands-on experience with Microsoft Purview, including Data Loss Prevention, Information Protection and sensitivity labels, Insider Risk Management, Audit, and Communication Compliance
Working knowledge of at least one DSPM or data access governance platform, such as Microsoft, Varonis, Cyera, BigID, or Netwrix
Familiarity with third-party DLP and email security gateways
Working familiarity with retention schedules, retention labeling, and defensible disposition, including how legal holds interact with retention
Strong written communication and ability to explain data protection risk to attorneys, business stakeholders, and firm leadership
Experience in a law firm, professional services, or another environment with strict client confidentiality obligations
Familiarity with legal document management systems and their security models, such as iManage Work with Security Policy Manager and Threat Manager, or NetDocuments
Hands-on experience with Purview Data Lifecycle Management, Records Management, or eDiscovery
Certifications such as Microsoft SC-401, SC-200, CISSP, CIPT, IGP, or vendor-specific data protection certifications

Benefits

Comp & perks

Medical insurance
Dental insurance
Vision insurance
401k
Profit sharing
Short-term disability
Long-term disability
Life insurance
Tuition reimbursement
Paid time off
Paid holidays
Discretionary bonuses