Microsoft 365 Solution Architect

Quick Facts

• Contract: B2B
• Work model: 100% remote

Description

You will define, implement, and document a consistent Microsoft 365 tenant control and readiness architecture to enable Microsoft Copilot and governed AI agents. The role focuses on security controls and evidence-based readiness (not on license purchasing or mechanical provisioning).

Responsibilities

• Design enterprise-scale Microsoft 365 tenant configuration (Admin Center policies, update channels, and consistent Exchange, SharePoint, Teams setup)
• Configure Copilot Control System tenant-level policies (user scope, guardrails, usage scenarios) and export auditable baseline items for rollout cohorts
• Model identity cohorts and design Entra ID access controls using Conditional Access; extend to non-human identities for AI agents
• Configure Microsoft Purview information protection: Sensitivity Labels, DLP policies, retention, and auditing for Copilot-accessible content; mitigate oversharing in SharePoint and OneDrive
• Use Microsoft Intune and device compliance mechanisms for Conditional Access verification and agent enforcement
• Conduct structured tenant readiness assessments (scorecards, gap analysis, prerequisites, and risk register) for upcoming rollout waves
• Define Agent 365 tenant prerequisites (identity connections, delegation models, core services) with the A365 Architect
• Deliver as-built documentation, readiness assessment methodology, and operational instructions for customer teams to re-validate the environment before further waves

Benefits

• Direct impact on the security and readiness foundation for global Copilot and AI agent adoption
• Work based on facts, logs, and configuration evidence in a co-design partnership approach
• Mature mix of SCRUM and Waterfall methods tailored to enterprise rollouts

Requirements

• Deep enterprise-level architectural experience with Microsoft 365 tenant configuration
• Practical knowledge of tenant configuration and service architecture across Exchange, SharePoint, and Teams
• Advanced expertise in Microsoft Purview (Sensitivity Labels, DLP, retention) and oversharing mitigation
• Advanced Entra ID and Conditional Access knowledge, including policies for non-human identities/service principals
• Experience designing Copilot Control System policies, controls, and audit-ready guardrails
• Ability to perform evidence- and telemetry-based readiness assessments (gap analysis, scorecards, risk registers)
• Experience in regulated environments and understanding of legal/business requirements (e.g., EU AI Act, Responsible AI, works council considerations)
• Security-by-design mindset (Least Privilege), including PIM/time-bound elevation and accurate audit logging
• Strong communication skills to explain architecture decisions and business implications to governance boards
• Fluent English (C1/C2)