Power Platform & Workload Governance Engineer

Cyclotron, Inc.•Chicago, IL

13d•$115,000 - $144,986•Remote

About The Position

Cyclotron's AI Transformation Group is hiring a Power Platform & Workload Governance Consultant to build the governed foundation that enterprise AI runs on. This is a hands-on, client-facing delivery role where Power Platform governance is the headline: environment strategy and landing zones, DLP and connector policy, managed environments, CoE Starter Kit, and ALM. Your second strength is platform and workload governance across Microsoft 365 and Azure: collaboration policy, Azure Policy, landing zones, and application governance. You will also carry enough data, AI, and agent governance knowledge to configure Copilot Studio guardrails and work shoulder to shoulder with our AI and data specialists. The right person has lived inside the Power Platform Admin Center long enough to have informed opinions about it and can turn a governance design into a working, tested configuration.

Requirements

4+ years of enterprise Microsoft platform experience, with 3+ years hands-on in Power Platform administration, governance, or architecture across multiple environments and business units.
Strong hands-on experience with Power Apps, Power Automate, Dataverse, and the Power Platform Admin Center (PPAC). You can navigate PPAC quickly and know what each setting does.
Proven experience with environment strategy, DLP design and enforcement, managed environments, and solution ownership and access control models.
Hands-on ALM with Power Platform Pipelines or Azure DevOps, including approval gates and multi-stage promotion.
Working knowledge of Microsoft 365 administration and Azure governance fundamentals (Azure Policy, RBAC, landing zones).
Working knowledge of Copilot Studio and how agents are built, published, and secured.
Solid understanding of Entra ID, least privilege, conditional access, and auditability.
Clear, confident client communication and strong emotional intelligence; you explain technical choices plainly and build trust with client admins.
Able to work remotely within the United States or Canada with reliable overlap for Eastern and Central business hours.
Governance-fluent bar: we are looking for someone visibly engaged with how the Microsoft AI, data, and automation platforms are governed at enterprise scale. You don't need to check every box below, but the majority should feel like a clear “yes,” and you should be ready to walk us through the relevant ones in a portfolio review:
You have deployed and operationalized the CoE Starter Kit at a real client, not just installed it.
You have designed a DLP policy that did not break every flow, and can explain how you ran the impact analysis.
You have built a Development to Stage/UAT to Production pipeline with approval gates that client teams still use.
You have informed opinions on managed environments versus default, and where the current platform guardrails fall short.

Nice To Haves

Pro-code depth: Azure Functions, Logic Apps, custom connectors, API Management, and PowerShell or the Power Platform CLI for admin automation.
Microsoft Purview basics: sensitivity labels, DLP, and retention.
Microsoft Fabric and Dataverse-to-Fabric integration patterns.
ServiceNow or ITSM integration for environment and agent requests.
Certifications such as PL-400, PL-600, PL-900, MS-102, or AZ-104, or equivalent experience.
Consulting or professional services experience.

Responsibilities

Configure environment strategy and landing zones: tiered and functional environments, environment groups, Development to Stage/UAT to Production models, naming, ownership, maker and admin access, and provisioning standards.
Design and configure classic and advanced DLP policies and connector classification; disable restricted connectors by default and run impact analysis so nothing breaks unintentionally at design time or run time.
Implement ALM: solution packaging, versioning, environment variables, Power Platform Pipelines and Azure DevOps approval flows, and rollback procedures, validated through end-to-end test deployments.
Deploy, customize, and operationalize the CoE Starter Kit and Copilot Studio Starter Kit; assess environment structure, usage, maker activity, connector risk, licensing blockers, and admin processes.
Define and apply Entra ID security group naming standards and security role models across environments, and validate assignments.
Run environment strategy, DLP, ALM, licensing and capacity, and monitoring workshops with client platform teams.
Implement Microsoft 365 collaboration governance: Teams, SharePoint, and Exchange policy, external sharing, lifecycle, and retention.
Apply Azure governance: landing zones, Azure Policy enforcement, RBAC, tagging, and cost controls for workloads that extend the Power Platform.
Govern the pro-code edge of the platform: custom connectors, Logic Apps, Azure Functions, API Management, and secrets handling.
Configure Copilot Studio governance controls: maker access and publishing models, Copilot Studio-specific DLP, credit consumption caps, and production promotion checkpoints.
Support agent intake and lifecycle processes, including ServiceNow or ITSM-based intake, metadata, ownership, and lifecycle states.
Govern Dataverse security and data ownership, and coordinate with Purview and data governance specialists on labeling and DLP.
Work directly with client Power Platform administrators and platform owners; explain what each setting does and why it matters.
Deliver knowledge transfer and operational handoff so client teams can run what we build.
Contribute to deliverables: environment and governance models, ALM and deployment runbooks, validation summaries, and policy templates.