Microsoft Purview Solution Architect for SharePoint & OneDrive Label Integration

Project Overview We are seeking a highly experienced Microsoft Purview professional to help plan, design, and enable an integration that applies externally generated sensitivity classifications to files stored in Microsoft SharePoint Online and OneDrive for Business. Our external platform evaluates files and determines the most appropriate sensitivity classification. The selected professional will help us design and validate the Microsoft architecture required to map those classifications to the appropriate Microsoft Purview sensitivity labels and apply the labels to files within a customer’s Microsoft 365 tenant. This is not a general Purview administration or advisory engagement. We need someone with direct, hands-on experience implementing programmatic sensitivity labeling for SharePoint and OneDrive. Scope of Work The selected professional will: Assess the technical and licensing requirements for the proposed integration. Define the recommended architecture for receiving external classification decisions and applying the corresponding Purview sensitivity labels. Design the mapping between external classification values and customer-defined Purview labels. Define the required Microsoft Entra ID application, permissions, roles, authentication model, and tenant configuration. Confirm the appropriate use of Microsoft Graph, Purview APIs, the Microsoft Information Protection SDK, or other supported Microsoft services. Identify API limitations, metering requirements, supported file types, performance considerations, and potential throttling constraints. Address label priority, replacement, downgrade, justification, encryption, and policy conflict scenarios. Define an approach that supports SharePoint Online and OneDrive for Business. Assist with configuration and enablement of a working proof of concept. Develop a repeatable deployment approach that can be used within customer-managed Microsoft 365 tenants. Provide implementation documentation and knowledge transfer to our technical team. Expected Deliverables Current-state and requirements assessment. Recommended solution architecture and data flow. Microsoft licensing, configuration, permissions, and dependency checklist. External-to-Purview label mapping methodology. Working proof of concept for applying labels to selected SharePoint and OneDrive files. Error handling, monitoring, audit, and rollback recommendations. Security and least-privilege recommendations. Production deployment and testing plan. Technical documentation and knowledge-transfer session. Required Experience Applicants must have: Deep expertise in Microsoft Purview Information Protection and sensitivity labels. Proven experience enabling sensitivity labels for SharePoint Online and OneDrive. Hands-on experience programmatically applying or updating sensitivity labels on files. Strong experience with Microsoft Graph, Microsoft Entra ID application registrations, API permissions, and application authentication. Experience designing secure, customer-owned, single-tenant Microsoft integrations. Knowledge of Purview label policies, label priority, encryption, DLP, retention, audit, and compliance considerations. Experience troubleshooting API permissions, throttling, metered services, unsupported file types, and labeling conflicts. Strong architecture and documentation skills. Referenceable Experience Is Mandatory Applicants must provide at least two relevant examples where they personally designed or implemented a comparable Microsoft Purview sensitivity-labeling solution. References should be available to validate the applicant’s role, technical contribution, and successful delivery. General Purview administration, policy consulting, certification, or training experience without comparable implementation experience will not be sufficient. Proposal Requirements Please include: A concise description of your most relevant Purview implementation. Your specific role and technical responsibilities. How sensitivity labels were applied to SharePoint or OneDrive content. The Microsoft services, APIs, SDKs, and authentication model used. Approximate scale, including file volume or number of SharePoint sites. Major technical challenges encountered and how you resolved them. Whether the solution used delegated or application permissions. Two referenceable client engagements. Relevant Microsoft certifications. Your availability to begin. Screening Questions Describe a solution you personally implemented that programmatically applied Purview sensitivity labels to SharePoint or OneDrive files. Which Microsoft API or SDK did you use, and why was it selected? How would you securely map an external classification decision to a customer’s existing Purview sensitivity-label ID? What tenant settings, Entra ID permissions, licenses, and billing requirements would you validate before implementation? How would you handle an existing file with a higher-priority label than the externally recommended label? What limitations or risks should we anticipate when labeling files at enterprise scale? Can you provide two references who can verify your direct implementation experience? Applications that do not provide specific, referenceable examples will not be considered.