Sr MS365 Engineer - Copilot & Power Platform Operations

Lockton•Kansas City, MO

12d

About The Position

The Senior M365 Engineer – Copilot & Power Platform Operations manages the secure operation and governance of Microsoft 365 Copilot, Copilot Studio, and supporting Power Platform services. This role administers tenant settings, environments, access controls, agents, connectors, and data-loss-prevention policies in partnership with Information Security and Compliance. The engineer also provides senior-level Microsoft 365 support and serves as an escalation point for Copilot, Power Platform, and tenant-level operational issues.

Requirements

Microsoft 365 Copilot administration
Copilot Studio administration
Power Platform administration
Microsoft Entra ID security groups and licensing
Information Security and Compliance partnership
Senior-level Microsoft 365 support
Escalation point for Copilot, Power Platform, and tenant-level operational issues
Power Platform DLP policies
Connector and action management
RBAC design and enforcement
Exchange Online, Microsoft Teams, SharePoint Online, OneDrive, and Microsoft Entra ID support
M365 tenant security and compliance standards
Development and maintenance of operational standards and runbooks

Responsibilities

Configure and maintain tenant-wide Microsoft 365 Copilot settings and access controls in the Microsoft 365 Admin Center.
Scope Microsoft 365 Copilot availability using Microsoft Entra ID security groups and licensing aligned with InfoSec and Compliance requirements.
Enable, restrict, block, deploy, and retire Microsoft 365 Copilot agents as part of standard M365 tenant operations.
Review and deploy Microsoft-built Copilot agents in coordination with InfoSec and Compliance.
Administer Copilot Studio as a Microsoft 365 platform capability, including default, sandbox, and production environment separation.
Manage Copilot Studio environment access, security groups, and isolation boundaries using Entra ID.
Control who can create, edit, publish, and share Copilot Studio agents based on approved M365 access models.
Configure Copilot Studio agent sharing scope, authentication behavior, and publishing targets with InfoSec and Compliance review.
Administer Power Platform environments that support Copilot Studio and Microsoft 365 Copilot agent functionality.
Configure and enforce Power Platform DLP policies protecting Microsoft 365 data sources.
Manage connectors and actions used by Copilot Studio agents and Power Automate flows that interact with Microsoft 365 services.
Design and enforce RBAC using Entra ID roles, security groups, licensing, and platform-specific permissions.
Review agent capabilities and data access impacting core Microsoft 365 services, including Exchange Online, Microsoft Teams, SharePoint Online, and OneDrive, with InfoSec and Compliance prior to enablement.
Monitor and respond to Microsoft 365 service changes, feature releases, and security advisories affecting Copilot and Power Platform.
Investigate and remediate security or compliance findings related to Copilot, agent access, or Microsoft 365 data exposure.
Ensure Copilot and agent behavior aligns with established Microsoft 365 tenant security and compliance standards.
Provide senior-level M365 engineering support across Exchange Online, Microsoft Teams, SharePoint Online, OneDrive, and Microsoft Entra ID.
Ensure Copilot integrates cleanly with existing Microsoft 365 identity, messaging, collaboration, and data services.
Act as an escalation point for Microsoft 365 Copilot, Power Platform, and tenant-level operational issues.
Develop and maintain Microsoft 365 operational standards and runbooks for Copilot and agent administration in collaboration with InfoSec and Compliance.