Senior SharePoint / DLP Engineer

About the role

The Senior SharePoint / DLP Engineer will provide Tier 3 troubleshooting, systems administration, infrastructure improvements, data protection, and workflow automation for Chinook's managed IT and security services. This is an on‑site role at the corporate headquarters in Arlington, VA.

Key responsibilities

• Implement, administer, and test DLP and IRM/DRM solutions, including classification, encryption, permissions, and sharing restrictions.
• Administer on‑premises and virtualized infrastructure such as FortiGate firewalls, Microsoft 365 GCC, Azure, Entra ID, Intune, SharePoint, and Teams.
• Author and maintain technical white papers, SOPs, architecture diagrams, runbooks, and implementation guides in version‑controlled repositories.
• Execute formal change management processes, including documentation, testing, approvals, rollout, and post‑change validation.
• Resolve complex Tier 3 issues across identity, endpoints, servers, networks, cloud services, and business applications.
• Coordinate patching, vulnerability remediation, upgrades, backup and recovery testing with the managed service provider.
• Design and maintain IT service‑management and electronic‑signature workflows using Adobe Sign or equivalent.
• Configure and validate Microsoft Sentinel and other security‑platform integrations, and support SOC incident response.
• Support AI enablement projects through configuration, integration testing, documentation, and user assistance.

Required profile

• At least 7 years of hands‑on systems administration, infrastructure, or engineering experience with independent Tier 3 troubleshooting.
• Bachelor’s degree in IT, Computer Science, Cybersecurity, or related field (or 12 years experience in lieu of degree).
• Experience implementing and testing DLP and IRM/DRM policies.
• Proven ability to produce detailed technical documentation and execute formal change management.
• Strong Microsoft 365, Azure, Entra ID, and Intune administration skills.
• U.S. citizenship and ability to obtain a Secret security clearance.

Required skills

• SharePoint, Microsoft 365 GCC, Azure, Entra ID, Intune
• DLP and IRM/DRM technologies
• FortiGate firewalls, Fortinet
• PowerShell scripting, APIs, workflow automation tools
• Adobe Sign or equivalent electronic‑signature platforms
• Microsoft Sentinel, Qualys, Microsoft Purview, Fortra information‑protection products
• CrowdStrike SOC integrations
• Windows administration, DNS, DHCP, backup solutions