Copilot, Cowork & Copilot Studio Governance Engineer

Milbank LLP•New York, NY

About The Position

Milbank is rapidly adopting Microsoft 365 Copilot, Copilot Cowork, and Copilot Studio agents, and needs governance to keep pace with that adoption. This contract Copilot Engineer will stand up and operationalize agent governance across the tenant, including agent sharing and exemption controls, inventory and risk baseline, high-exposure remediation, data-protection controls, safe adoption, and knowledge transfer so the program is self-sustaining when the engagement ends.

Requirements

5+ years of hands-on Microsoft 365 and Microsoft Entra administration, with recent, demonstrable focus on Copilot and/or Power Platform governance.
Hands-on experience administering Microsoft 365 Copilot (Copilot Control System) and building and governing agents in Copilot Studio and Agent Builder.
Power Platform admin center: Managed Environments, DLP / connector policies, and environment strategy.
Microsoft Purview sensitivity labels and data loss prevention; governance experience operationalizing controls and lifecycle processes at scale.
Automation with PowerShell and Microsoft Graph; excellent documentation, stakeholder communication, and knowledge-transfer skills.
Experience with Microsoft Copilot Cowork and/or Microsoft Agent 365.
Familiarity with ethical walls, matter security, pay-as-you-go metering, and Copilot Credits.
Relevant Microsoft certifications (e.g., AI Administrator Associate, Power Platform, Security/Identity, Information Protection / Purview).
Prior experience in a law firm, professional services, or another regulated, confidentiality-sensitive environment; familiarity with ethical walls is a plus.

Responsibilities

Agent sharing governance — tenant-wide restriction plus exemption request/approval workflow — operational in the Microsoft 365 Copilot Control System.
Complete, maintained agent inventory with a transparent, repeatable risk-scoring model.
Remediation of the highest-exposure agents, including action-taking / connector agents and agents with embedded firm data.
Microsoft Purview sensitivity labels and DLP applied across agents and their grounding data; labeling gaps closed.
Pay-as-you-go / Copilot Credits monitoring, billing-policy guardrails, maker enablement guardrails, runbooks, and knowledge transfer.
Configure and maintain agent access, sharing, publishing, lifecycle governance, approved-publisher model, and exemption workflow with Information Security.
Govern Copilot Studio declarative and custom-engine agents; configure Managed Environments, environment routing, connector/DLP policies, and least-privilege controls.
Build and maintain the tenant agent registry/inventory; risk-score custom actions, data-source scope, embedded files, sharing breadth, and labeling gaps.
Baseline, prioritize, and remediate high-exposure agents; report progress to IT leadership.
Align agent controls with the firm's confidentiality and client/matter obligations, including ethical-wall considerations.
Produce maker guidance, guardrails, standards, runbooks, and documentation; support Desktop Experience and AI Solutions on agent access and adoption.