Microsoft 365 & AI Solutions Engineer

Resonaite; Mississauga; On-site; CAD 120,000 - 180,000; Full time

Job summary

Resonaite is seeking a Microsoft 365 & AI Solutions Engineer to design, deploy, secure, and optimize M365 environments. You will drive Copilot adoption across tenants, implement Purview governance, and act as a Level 3/4 escalation point for complex issues.

The role requires 5+ years in production, strong IAM and governance experience, and onsite work in the GTA/Mississauga area, with up to 5 days onsite per week.

Qualifications

• 5+ years hands-on with Microsoft 365 environments in production.
• Expertise across Entra ID, Intune, Teams, Exchange Online and SharePoint Online.
• Strong IAM experience: Conditional Access, PIM, MFA, entitlement management and hybrid identity.
• Purview familiarity: sensitivity labels, DLP, retention, insider risk and governance.
• At least one Copilot deployment from readiness to live users; cloud AI governance experience.
• PowerShell and Microsoft Graph for administration and automation.
• Client-facing communication and documentation to senior IT and security leadership.
• Two or more of MS-102, SC-300, SC-401, or MD-102 certifications; additional certs are a plus.

Responsibilities

• Design, configure and deploy Microsoft 365 environments across Entra ID, Intune, Teams, Exchange Online and SharePoint Online.
• Lead Copilot deployments from readiness through production rollout and user enablement.
• Assess data readiness, fix oversharing, adjust permissions and govern information for Copilot.
• Design Purview capabilities including sensitivity labels, DLP, retention and DSPM for AI.
• Own identity and access management across Entra ID and hybrid identity.
• Develop and govern AI agents using Copilot Studio and Azure AI Foundry.
• Establish governance standards for Copilot, enterprise data access and responsible AI.
• Troubleshoot Level 3/4 Microsoft 365, identity, endpoint, security and integration issues.
• Automate admin tasks with PowerShell and Microsoft Graph; create runbooks and docs.

Skills

Entra ID

Intune

Teams

Exchange Online

SharePoint Online

Identity and access management

Conditional Access

PIM

MFA

Entitlement management

Hybrid identity

Purview

Sensitivity labels

DLP

Retention

Insider risk

AI governance

PowerShell

Microsoft Graph

Copilot Deployment

Copilot Studio

Azure AI Foundry

Documentation

Client-facing communication

Senior escalation

Tools

PowerShell

Microsoft Graph

Copilot Studio

Job description

Our client in the professional services sector is seeking a fulltime/permanent Microsoft 365 & AI Solutions Engineer to design, deploy, secure, and optimize Microsoft 365 environments for our clients while helping them adopt Microsoft Copilot and AI solutions.

You will work directly within client tenants across Microsoft 365, Entra ID, Intune, Purview, Teams, Exchange, SharePoint, Copilot and related Azure AI technologies. You will serve as a senior technical escalation point for complex Level 3 and Level 4 issues and work directly with client IT, security and technology leadership.

Location: Client offices in GTA/Mississauga area

Responsibilities

• Design, configure and deploy Microsoft 365 environments across Entra ID, Intune, Teams, Exchange Online and SharePoint Online.
• Lead Microsoft 365 Copilot deployments from readiness assessment through production rollout and user enablement.
• Assess data readiness and remediate oversharing, permissions and information governance risks prior to Copilot deployment.
• Design and implement Microsoft Purview capabilities including sensitivity labels, DLP, retention, insider risk and Data Security Posture Management (DSPM) for AI.
• Own identity and access management across Entra ID, including Conditional Access, Privileged Identity Management (PIM), entitlement management and hybrid identity.
• Design, build and govern AI agents using Microsoft Copilot Studio and Azure AI Foundry.
• Establish governance standards for Copilot, agents, enterprise data access and responsible AI adoption.
• Troubleshoot and resolve complex Level 3 and Level 4 Microsoft 365, identity, endpoint, security and integration issues.
• Automate administration and remediation activities using PowerShell and Microsoft Graph.
• Assess existing or poorly configured Microsoft environments and develop remediation and modernization plans.
• Produce architecture diagrams, technical documentation, implementation plans and operational runbooks.
• Work directly with client IT teams to implement solutions within production Microsoft environments.
• Present technical designs, risks and recommendations to CIOs, security leaders and other senior stakeholders.

Requirements

• 5+ years of hands-on experience engineering and supporting Microsoft 365 environments in production.
• Strong experience across Entra ID, Intune, Teams, Exchange Online and SharePoint Online.
• Strong identity and access management experience including Conditional Access, PIM, MFA, entitlement management and hybrid identity.
• Hands-on Microsoft Purview experience including sensitivity labels, DLP, retention, insider risk and information governance.
• At least one Microsoft 365 Copilot deployment taken from readiness assessment through production rollout to live users.
• Experience assessing and remediating data permissions, oversharing and security risks in preparation for Copilot.
• Experience with Microsoft Copilot Studio, Azure AI Foundry and/or enterprise AI agent development and governance.
• Strong PowerShell and Microsoft Graph experience for administration, automation and remediation.
• Experience troubleshooting complex Microsoft 365 environments and acting as a Level 3/4 escalation point.
• Previous consulting, professional services or Managed Service Provider (MSP) experience.
• Strong client-facing communication and documentation skills, with the ability to present to senior IT and security leadership.
• Must hold two or more of the following certifications: MS-102 (Microsoft 365 Administrator), SC-300 (Identity and Access Administrator Associate), SC-401 (Information Security Administrator Associate), or MD-102 (Endpoint Administrator Associate).
• Additional certifications such as Microsoft 365 Certified: Administrator Expert, AB-900, AI-103, AZ-104, SC-200 or SC-500 are considered an asset. Retired SC-400, AI-102 and AZ-500 certifications will also be recognized.
• Must live within reasonable commuting distance of the west end of the Greater Toronto Area.
• Must be able and willing to work onsite at client locations up to 5 days per week, unless otherwise specified by the engagement.