Principal Microsoft 365 & AI Platform Engineer

## About the Role

This pivotal role requires a seasoned engineer to act as the technical lead and subject matter expert for the firm’s Microsoft 365 tenant, with a strong emphasis on Microsoft 365 Copilot and AI agents. You will own the architecture, configuration standards, and roadmap, leading complex projects, driving AI innovation, and ensuring robust governance and security across the platform.

## Key Responsibilities

- Act as the technical lead and subject matter expert for the firm’s Microsoft 365 tenant, owning its architecture, configuration standards, and roadmap.
- Lead large and complex Microsoft 365 projects end-to-end, including migrations, tenant changes, and new service rollouts, delegating and reviewing work across the team.
- Own the operating model for Microsoft 365 Copilot and AI agents, defining how agents are built, approved, published, monitored, and retired across Copilot Studio, Copilot Agent Builder, and Share Point agents.
- Design and implement agent governance using Microsoft Agent 365, the Microsoft 365 admin center, and the Power Platform admin center. This includes agent inventory and registry, publishing controls, setting strategy, and DLP and connector policies.
- Define identity and access controls for agents using Microsoft Entra Agent ID, Conditional Access, and least-privilege permissions, working closely with Info Sec.
- Build agents in Copilot Studio and automation in Power Automate that solve real business problems, and set the standards and guardrails for makers across the business.
- Lead data protection for collaboration and AI using Microsoft Purview (sensitivity labels, DLP, retention, and eDiscovery) to prevent oversharing and meet the firm’s obligations (SOC 2, ISO 27001, GDPR, DORA, ISO 42001, EU AI Act).
- Own the security baselines and lifecycle policies for Exchange Online, Teams, Share Point Online, and One Drive, including external sharing and guest access.
- Automate tenant administration using Power Shell and Microsoft Graph, and bring Microsoft 365 configuration under version control and peer review.
- Manage licensing, usage,



and cost across Microsoft 365, including Copilot license allocation and agent consumption, and drive optimization.
- Act as the escalation point for complex, often undefined incidents spanning multiple teams, leading deep root cause analysis and systemic fixes.
- Track the Microsoft 365 roadmap and Message Center, assess the impact of new features, and advise leadership on adoption and risk.
- Engage with Microsoft, partners, and vendors on escalations, licensing, and roadmap.
- Contribute to departmental planning, including the Microsoft 365 roadmap, budget, and licensing input.
- Coach, mentor, and review the work of other engineers, and share Microsoft 365 and Copilot knowledge across the firm.
- Document standards, designs, and runbooks in Confluence and our internal Platform Portal to enable self-service.
- Participate in the on-call rota to support critical Microsoft 365 and platform services.

## Requirements

### Essential Knowledge & Experience

- Bachelor’s degree (e.g., B.E./B. Tech) in Computer Science, IT, or a related field, or equivalent practical experience, with a minimum of eight years’ experience in Microsoft 365 engineering, administration, or a closely related role.
- Recognized deep expertise across Exchange Online, Teams, Share Point Online, One Drive, and Microsoft Entra ID.
- Hands-on experience deploying and governing Microsoft 365 Copilot, and building and publishing agents in Copilot Studio.
- Strong understanding of agent governance: Microsoft Agent 365, Entra Agent ID, Power Platform environments, and DLP and connector policies.
- Strong experience with Microsoft Purview (sensitivity labels, DLP, retention, eDiscovery) and with preventing oversharing in Copilot and Share Point.




- Expert in Power Shell and Microsoft Graph for automation and administration at scale.
- Strong identity knowledge: Entra ID, Conditional Access, Privileged Identity Management, and hybrid identity.
- Proven track record of leading complex Microsoft 365 projects and migrations.
- Able to influence stakeholders, advise leadership, and engage confidently with vendors and partners.
- Experience coaching and mentoring engineers.
- AI-literate: able to apply AI-assisted tooling in your own work, and to understand AI risks such as data leakage, oversharing, and prompt injection well enough to design controls against them.
- Able to manage multiple concurrent workstreams, balancing project delivery, BAU, and support commitments, prioritizing effectively and working with limited oversight.
- Comfortable collaborating with UK-based colleagues across time zones as part of a global team.
- Able to participate in the on-call rota - on-call is a requirement of this role.

### Desirable

- Microsoft certifications such as Microsoft 365 Administrator Expert (MS-102), Identity and Access Administrator (SC-300), Information Security Administrator (SC-401), or Power Platform (PL-200).
- Experience operating in a regulated financial services or otherwise highly governed environment.
- Familiarity with AI governance frameworks such as ISO 42001 and the EU AI Act.
- Pro-code agent development experience (e.g., Microsoft 365 Agents SDK, Microsoft Foundry).
- Configuration-as-code for Microsoft 365 (e.g., Microsoft365DSC) with Git-based workflows.
- Experience with Microsoft Defender for Office 365 and Intune.
- Exposure to Azure and Infrastructure as Code (Terraform).

## What We Offer

- Participation in the on-call rota, with standing on-call allowances applying.
- The opportunity to shape how the firm adopts and governs AI agents, with support towards Microsoft certifications and cross-skilling into the wider platform.
- You will join a global, collaborative team that values innovation, ownership, and continuous learning, with a direct impact on how the firm works and adopts AI.

📌 Microsoft 365 Engineer- International Financial Institution (India)
🏢 RiverForest Connections Private
📍 India