M365 AI Architect

Quick Facts

• Role: M365 AI Architect
• Work mode: Fully remote

Description

You will build, oversee, and audit Microsoft 365 tenant foundations to enable secure Copilot and Agent 365 deployments. The role includes designing Entra ID and Conditional Access architecture, implementing Microsoft Purview data protection and compliance controls, managing Intune device compliance, and running structured tenant readiness assessments with gap analysis and risk tracking. You will also generate auditable evidence and maintain as-built technical documentation for knowledge transfer.

Responsibilities

• Build, supervise, and audit Microsoft 365 tenant foundations for Copilot and Agent 365
• Configure and consistently manage Copilot Control System policies and create auditable baselines by deployment cohorts
• Design and maintain Entra ID architecture and Conditional Access policies, including user groups and non-human identities/agents
• Implement and parameterize Microsoft Purview: Sensitivity Labels, DLP, retention, and audit; mitigate oversharing risk on SharePoint and OneDrive
• Manage Intune and device compliance as enforcement points for security and access policies
• Conduct tenant readiness assessments: scorecards, gap analysis with owners, and a risk register
• Validate prerequisites for Agent 365 (identity linkage, delegation model, platform listening) in collaboration with the A365 Architect
• Define, generate, and archive automated evidence of security control operation for audits, works council requirements, and EU AI Act needs
• Prepare full technical documentation (as-built), work instructions, and repeatable readiness assessment methodology for client team handover
• Work in a mixed SCRUM/Waterfall approach while applying least privilege with JIT elevation

Requirements

• Enterprise-level, hands-on experience in Microsoft 365 architecture and configuration (Admin Center, Exchange, SharePoint, Teams)
• Proficiency in Microsoft security ecosystem: Copilot Control System, Entra ID (Conditional Access), Purview (DLP, Sensitivity Labels, Audit), and Intune
• Experience performing enterprise audits and tenant readiness assessments (tenant readiness assessment, scorecarding, gap analysis)
• Practical knowledge of legal/regulatory requirements for AI and data (EU AI Act, works-council/Responsible AI)
• Ability to create deployment documentation and repeatable procedures (Work Instructions, as-built records) for knowledge transfer
• Excellent English (B2/C1)
• Ability to translate security/governance decisions into language understandable by management
• Willingness to work without permanent admin privileges using time-bound elevation / JIT elevation

Benefits

• Long-term cooperation
• Rate: 190–230 PLN net/hour + VAT
• Support to start and run a business (for candidates without prior experience)
• Fast hiring process: two technical interviews with managers (online, max 1 hour each)
• Fully remote collaboration
• Private medical care
• Multisport card
• Modern equipment provided with required software and configuration