Microsoft 365 Architect

Quick Facts

• Role: Microsoft 365 Architect
• Project: Microsoft 365 and AI governance (Copilot and governed AI agents)
• Industry: Pharmaceutical / Medical
• Work model: 100% remote
• Budget: 130–170 PLN net/hour (B2B)
• Project length: Long-term
• Location: Kraków, Poland (remote)

Description

You will design and maintain the Microsoft 365 tenant foundation required for Copilot and governed AI agents, focusing on tenant-level controls and auditable evidence. Responsibilities include configuring M365 policies and service settings, designing Copilot control guardrails, and extending identity controls to non-human identities where AI agents are in scope. You will also run structured tenant readiness assessments and produce gap analyses, risk registers, and readiness scorecards for rollout waves.

Responsibilities

• Design and maintain Microsoft 365 tenant architecture and control baseline
• Configure and manage tenant-level Microsoft 365 policies and service settings
• Design and configure the Copilot Control System (access, experiences, guardrails)
• Establish auditable baselines and evidence for Microsoft 365 and Copilot controls
• Design Entra ID and Conditional Access policies (directory hygiene, cohort group modelling)
• Extend identity/access models for non-human identities for AI agents
• Configure Microsoft Purview sensitivity labels, DLP, retention, and audit controls
• Assess and address oversharing risks across SharePoint and OneDrive
• Use Intune and device compliance inputs to support Conditional Access and security enforcement
• Conduct Microsoft 365 tenant readiness assessments for Copilot rollouts
• Produce readiness scorecards, gap analyses, prerequisite checklists, and risk registers
• Identify tenant-side prerequisites for AI agent platforms
• Collaborate with technical and security stakeholders for readiness by rollout wave
• Analyze configuration and usage data to find gaps between documented and actual environments
• Define evidence requirements proving controls are effectively implemented
• Design a maintainable and revalidatable tenant foundation before each rollout wave
• Identify conditions/changes that trigger tenant revalidation
• Communicate control decisions and business impact to governance and non-technical stakeholders

Requirements

• Strong professional experience as a Microsoft 365 Architect
• Deep hands-on knowledge of Microsoft 365 tenant architecture in enterprise environments
• Experience with Microsoft 365 Admin Center policies, update channels, and service configuration
• Hands-on knowledge of Microsoft Copilot governance and tenant-level controls
• Strong knowledge of Microsoft Entra ID and Conditional Access
• Experience with directory hygiene and group modelling
• Experience with Microsoft Purview (sensitivity labels, DLP, retention, auditing)
• Strong knowledge of Intune and device compliance
• Experience conducting Microsoft 365 tenant readiness assessments
• Experience creating gap analyses, readiness scorecards, prerequisite checklists, and risk registers
• Understanding of identity and platform prerequisites for AI agents
• Strong analytical skills to identify dependencies and technical blockers
• Strong understanding of control evidence and auditability
• Ability to communicate technical control decisions to non-technical stakeholders
• Ability to work independently and with security, governance, and technical stakeholders

Benefits

• 100% remote working model
• Full-time cooperation agreement based on B2B
• Private medical care with dental care (70% covered)
• Multisport card (also for an accompanying person)
• Life insurance
• Opportunity to work in an international IT environment