Assistant Multi Factor Authentication Jobs in Raleigh, NC

Overview:
Hiring: Microsoft Purview / CJIS Email & Document Encryption Implementation Consultant
Location: Durham, North Carolina - Hybrid (on-site and virtual workshops, implementation activities, stakeholder engagement, testing, and training as required)
Project Duration: Late Fall 2026 - April 30, 2027 implementation target, with project support, documentation, and knowledge transfer through completion
The City of Durham / Durham Police Department (DPD) is seeking an experienced Microsoft Purview / CJIS Email & Document Encryption Implementation Consultant to design, configure, implement, test, and support a comprehensive data protection and information governance solution within the Department's Microsoft 365 Government Community Cloud (GCC) environment and endpoints.
The selected consultant will be responsible for implementing Microsoft Purview capabilities that strengthen the security, governance, classification, encryption, data loss prevention, lifecycle management, and records management of regulated information, including Criminal Justice Information Services (CJIS) data. The engagement will require close collaboration with DPD and City stakeholders to develop customized configurations rather than relying on rigid, prebuilt solutions.
Key Responsibilities:
✓ Conduct an initial current-state and gap assessment of the Department's existing Microsoft 365, endpoint, information protection, and regulated-data environment before configuration begins.
✓ Design and configure Microsoft Purview Data Classification and Automated Sensitivity Labeling capabilities for law-enforcement-sensitive, CJIS, PII, HIPAA, and other regulated information.
✓ Implement Double Key Encryption (DKE) and automated encryption controls for sensitive email, documents, case files, and file-sharing scenarios.
✓ Configure Data Loss Prevention (DLP) policies across Microsoft 365 workloads, including Exchange, SharePoint, OneDrive, Copilot, Teams, and endpoints.
✓ Develop automated protection policies that encrypt non-public case files when shared internally or externally and enforce appropriate recipient authentication and confidential handling requirements.
✓ Configure metadata-driven protection and labeling, including rules based on folder names, Originating Agency Identifiers (ORI), email recipients, group accounts, and other applicable business conditions.
✓ Implement persistent protection controls that maintain encryption when protected information is copied, forwarded, transferred, or accessed across Microsoft 365 applications and services.
✓ Configure protection for Microsoft Word, Excel, PowerPoint, PDF, and image-based evidence, including retroactive and ongoing classification and labeling.
✓ Implement Optical Character Recognition (OCR) and content inspection capabilities to identify regulated information contained within scanned documents and images.
✓ Configure controls governing the ability to print, download, copy, forward, store, or transfer sensitive emails and attachments to unauthorized locations, including personal cloud storage, USB devices, or external services.
✓ Implement permanent protection, access expiration, and role-based revocation of access to protected documents and emails after delivery, including scenarios outside the Microsoft 365 environment.
✓ Configure endpoint DLP controls for documents scanned through multifunction copiers and subsequently sent to email or OneDrive.
✓ Establish role-based override capabilities for automatic encryption and ensure all overrides are appropriately logged for administrative review.
✓ Configure comprehensive audit logging for access, labeling, protection, encryption, overrides, and related security activities, including integration with the City's SIEM/SOC platform through native capabilities or APIs.
✓ Integrate Microsoft Purview protection capabilities with existing Privileged Access Management (PAM) and/or Conditional Access controls.
✓ Configure and enforce Multi-Factor Authentication (MFA) using Microsoft Authenticator where required.
✓ Implement dynamic security markings, including label-dependent color coding, headers, footers, and watermarking of emails and attachments with customized recipient information.
✓ Develop and implement Data Lifecycle Management (DLM) and Records Management capabilities appropriate for regulated law-enforcement information.
✓ Develop role-based Microsoft 365/Purview licensing recommendations for approximately 650-700 users, including group accounts, and explain how licensing affects available Purview capabilities and CJIS compliance.
✓ Facilitate stakeholder workshops and requirements-gathering sessions with DPD and City teams to understand departmental requirements and co-develop customized configurations.
✓ Establish a structured implementation methodology covering planning, assessment, implementation/testing, documentation, UAT, pilot deployment, and department-wide rollout.
✓ Use sanitized or synthetic data during configuration and testing rather than live criminal case files.
✓ Conduct User Acceptance Testing (UAT) with an appropriate pilot group and iteratively refine configurations before department-wide deployment.
✓ Develop comprehensive configuration and implementation documentation, including a CJIS compliance mapping deliverable, to support long-term sustainability and City self-sufficiency.
✓ Deliver end-user and administrator training, knowledge transfer, and change-management support to facilitate successful adoption.
✓ Provide best-practice recommendations based on previous deployments involving law-enforcement agencies and regulated information.
✓ Identify potential implementation risks, technical constraints, alternative approaches, and mitigation strategies while maintaining alignment with the City's use cases and requirements.
✓ Participate in regular project meetings and provide availability during the City's core working hours of 8:00 AM-5:00 PM ET, with additional meetings as required.
Required Experience:
• 3-5+ years of hands-on experience implementing Microsoft Purview, Microsoft Information Protection, Microsoft 365 security, data governance, information protection, or comparable enterprise data-security solutions.
• Demonstrated experience implementing Microsoft Purview capabilities including Data Classification, Sensitivity Labels, DLP, Data Lifecycle Management, Records Management, and encryption controls.
• Proven experience implementing Microsoft 365 security and information protection solutions in government, law enforcement, public-sector, or other highly regulated environments.
• Demonstrated experience with CJIS or similarly regulated information, including experience protecting sensitive criminal justice, personally identifiable, health, or other controlled information.
• Strong technical expertise with Microsoft 365 GCC/Government environments, including Exchange, SharePoint, OneDrive, Teams, Copilot, and Microsoft endpoints.
• Hands-on experience with Double Key Encryption (DKE) or comparable advanced encryption and key-management technologies.
• Strong knowledge of Data Loss Prevention (DLP) policies across Microsoft 365 workloads and endpoint devices.
• Experience designing automated sensitivity-labeling and classification policies based on content, metadata, location, users, groups, ORIs, and other organizational attributes.
• Experience implementing persistent protection, document/email encryption, access expiration, recipient restrictions, and post-delivery access revocation.
• Experience with OCR, content inspection, image classification, and protection of scanned or image-based evidence.
• Strong knowledge of Microsoft security capabilities including Conditional Access, Privileged Access Management, Multi-Factor Authentication, Microsoft Authenticator, audit logging, and SIEM/SOC integrations.
• Demonstrated experience delivering at least three similar enterprise implementations, preferably for municipal, public-sector, law-enforcement, or other regulated organizations.
• Ability to provide client references demonstrating successful implementation of comparable email and document encryption solutions, including project scope, dates of service, and reference contacts.
• Experience conducting current-state assessments, gap analyses, requirements workshops, pilot implementations, UAT, iterative configuration, and enterprise rollouts.
• Strong understanding of information governance, records management, data lifecycle management, audit requirements, and regulated-information protection.
• Experience developing role-based licensing recommendations for Microsoft 365/Purview environments and understanding the relationship between licensing, functionality, and compliance requirements.
• Demonstrated ability to develop customized technical solutions in collaboration with stakeholders rather than relying exclusively on standardized or inflexible templates.
• Experience developing implementation documentation, configuration guides, compliance mappings, operational procedures, training materials, and knowledge-transfer programs.
• Personnel assigned to the project must meet applicable CJIS Personnel Security requirements, or provide a clear and actionable plan for achieving compliance before performing work involving Criminal Justice Information.
• Excellent communication, stakeholder facilitation, technical documentation, project management, problem-solving, executive presentation, and cross-functional collaboration skills.
Preferred Qualifications:
Previous experience implementing Microsoft Purview for a municipal law-enforcement agency.
Experience with regulated information environments governed by CJIS, public-records requirements, PII, HIPAA, or similar security and privacy standards.
Microsoft certifications relevant to security, compliance, identity, information protection, or Microsoft 365 administration.
Experience integrating Microsoft security/audit information with enterprise SIEM/SOC platforms through APIs or native connectors.
Demonstrated ability to recommend alternative approaches to complex information-protection requirements and provide successful implementation examples.
Experience transitioning organizations from paper-based workflows to secure electronic information-sharing processes.
Project Success Expectations:
The successful consultant will help the Durham Police Department establish a sustainable Microsoft Purview environment that:

• Automates encryption and protection of sensitive email and documents.
• Standardizes the management of regulated information.
• Enforces role-based internal and external sharing controls.
• Prevents unauthorized copying, transfer, storage, and distribution of sensitive information.
• Provides persistent protection across Microsoft 365 applications and external sharing scenarios.
• Improves classification, lifecycle management, records management, and auditability.
• Supports CJIS and other regulated-information requirements.
• Enables DPD staff to manage and sustain the solution after implementation.

The City anticipates beginning execution in late fall 2026 and expects the winning consultant to achieve full implementation of email and document encryption by April 30, 2027.
If you have a proven track record delivering Microsoft Purview implementations, CJIS-compliant information protection, enterprise email and document encryption, DLP, data classification, records management, and Microsoft 365 security transformation for government or law-enforcement organizations, we'd love to hear from you.
Skills:
UAT Coordination,Technical Documentation,Stakeholder Engagement