Sr MS365 Engineer - Copilot & Power Platform ...

Lockton Companies; Kansas City, Northern (MO, KY); Hybrid; USD 120,000 - 155,000; Full time

Benefits offered by this job

Health insurance

Job summary

Lockton Companies is seeking a Senior M365 Engineer to oversee Copilot, Studio, and Power Platform operations in Kansas City, MO. This role administers tenant settings, environments, access controls, and data-loss-prevention policies, partnering with Information Security and Compliance.

You will provide senior-level support across Exchange Online, Teams, SharePoint Online, OneDrive, and Entra ID, ensuring secure, compliant, and reliable platform operations.

Responsibilities

• Configure and maintain tenant-wide Microsoft 365 Copilot settings and access controls in the Microsoft 365 Admin Center.
• Scope Microsoft 365 Copilot availability using Entra ID security groups and licensing aligned with InfoSec and Compliance requirements.
• Enable, restrict, block, deploy, and retire Copilot agents as part of standard M365 tenant operations.
• Review and deploy Microsoft-built Copilot agents in coordination with InfoSec and Compliance.
• Administer Copilot Studio as a Microsoft 365 platform, including environment separation.
• Manage Copilot Studio environment access, security groups, and isolation boundaries using Entra ID.
• Control who can create, edit, publish, and share Copilot Studio agents based on approved M365 access models.
• Configure Copilot Studio agent sharing scope, authentication behavior, and publishing targets with InfoSec and Compliance review.
• Administer Power Platform environments that support Copilot Studio and Microsoft 365 Copilot agent functionality.
• Configure and enforce Power Platform DLP policies protecting Microsoft 365 data sources.
• Manage connectors and actions used by Copilot Studio agents and Power Automate flows that interact with Microsoft 365 services.
• Design and enforce RBAC using Entra ID roles, security groups, licensing, and platform-specific permissions.
• Review agent capabilities and data access impacting core Microsoft 365 services, including Exchange Online, Teams, SharePoint Online, and OneDrive, with InfoSec and Compliance prior to enablement.
• Monitor and respond to Microsoft 365 service changes, feature releases, and security advisories affecting Copilot and Power Platform.
• Investigate and remediate security or compliance findings related to Copilot, agent access, or Microsoft 365 data exposure.
• Ensure Copilot and agent behavior aligns with established Microsoft 365 tenant security and compliance standards.
• Provide senior-level M365 engineering support across Exchange Online, Teams, SharePoint Online, OneDrive, and Entra ID.
• Ensure Copilot integrates cleanly with existing Microsoft 365 identity, messaging, collaboration, and data services.
• Act as an escalation point for Microsoft 365 Copilot, Power Platform, and tenant-level operational issues.
• Develop and maintain Microsoft 365 operational standards and runbooks for Copilot and agent administration in collaboration with InfoSec and Compliance.

Job description

Sr MS365 Engineer - Copilot & Power Platform Operations

Kansas City, Missouri, United States of America

At Lockton, we’re passionate about helping our people achieve their ultimate potential. Our people are curious, action-oriented and always striving to make ourselves and those around us better. We’re active listeners working to ensure understanding and problem solvers developing innovative solutions. If you can see yourself delivering excellent service to clients, giving back to our communities and being a part of our caring culture, you belong here.

The Senior M365 Engineer – Copilot & Power Platform Operations manages the secure operation and governance of Microsoft 365 Copilot, Copilot Studio, and supporting Power Platform services. This role administers tenant settings, environments, access controls, agents, connectors, and data-loss-prevention policies in partnership with Information Security and Compliance. The engineer also provides senior-level Microsoft 365 support and serves as an escalation point for Copilot, Power Platform, and tenant-level operational issues.

Qualifications

• Configure and maintain tenant-wide Microsoft 365 Copilot settings and access controls in the Microsoft 365 Admin Center.
• Scope Microsoft 365 Copilot availability using Microsoft Entra ID security groups and licensing aligned with InfoSec and Compliance requirements.
• Enable, restrict, block, deploy, and retire Microsoft 365 Copilot agents as part of standard M365 tenant operations.
• Review and deploy Microsoft-built Copilot agents in coordination with InfoSec and Compliance.
• Administer Copilot Studio as a Microsoft 365 platform capability, including default, sandbox, and production environment separation.
• Manage Copilot Studio environment access, security groups, and isolation boundaries using Entra ID.
• Control who can create, edit, publish, and share Copilot Studio agents based on approved M365 access models.
• Configure Copilot Studio agent sharing scope, authentication behavior, and publishing targets with InfoSec and Compliance review.
• Administer Power Platform environments that support Copilot Studio and Microsoft 365 Copilot agent functionality.
• Configure and enforce Power Platform DLP policies protecting Microsoft 365 data sources.
• Manage connectors and actions used by Copilot Studio agents and Power Automate flows that interact with Microsoft 365 services.
• Design and enforce RBAC using Entra ID roles, security groups, licensing, and platform-specific permissions.
• Review agent capabilities and data access impacting core Microsoft 365 services, including Exchange Online, Microsoft Teams, SharePoint Online, and OneDrive, with InfoSec and Compliance prior to enablement.
• Monitor and respond to Microsoft 365 service changes, feature releases, and security advisories affecting Copilot and Power Platform.
• Investigate and remediate security or compliance findings related to Copilot, agent access, or Microsoft 365 data exposure.
• Ensure Copilot and agent behavior aligns with established Microsoft 365 tenant security and compliance standards.
• Provide senior-level M365 engineering support across Exchange Online, Microsoft Teams, SharePoint Online, OneDrive, and Microsoft Entra ID.
• Ensure Copilot integrates cleanly with existing Microsoft 365 identity, messaging, collaboration, and data services.
• Act as an escalation point for Microsoft 365 Copilot, Power Platform, and tenant-level operational issues.
• Develop and maintain Microsoft 365 operational standards and runbooks for Copilot and agent administration in collaboration with InfoSec and Compliance.

#LI-JM

Equal Opportunity Statement

Lockton Companies is proud to provide everyone anequal opportunity to grow and advance. We are committed to an inclusive culture and environment where our people, clients and communities are treated with respect and dignity.

At Lockton, supporting diversity, equity and inclusion is ingrained in our values, and we believe that we are at our best when we fully embrace everyone. We strive to cultivate a caring culture that learnsfrom, celebrates and thrives because of ourbreadth of differences. As such, we recognize that recruiting, developing and retaining people with diverse backgrounds and experiences is vital and enabling our people to thrive personally and professionally is critical to our long-term success.

About Lockton

Lockton is the largest privately held independent insurance brokerage in the world. Since 1966, our independence has allowed us to serve our clients, take care of our people and give back to our communities. As such, our 13,100+ Associates doing business in over 155 countries are empowered to do what’s right every day.

At Lockton, we believe in the power of all people. You belong at Lockton.

How We Will Support You

At Lockton, we empower you to be true to yourself in all that you do. Your success is our success, and we provide opportunities to help you grow and create a rewarding career path, however you envision it.

We are ready to meet you where you are today, and as your needs change over time. In addition to industry-leading health insurance, we offer additional options to support your overall health and wellbeing.

Any Employment Agency, person or entity that submits an unsolicited resume to this site does so with the understanding that the applicant's resume will become the property of Lockton Companies, Inc. Lockton Companies will have the right to hire that applicant at its discretion and without any fee owed to the submitting Employment Agency, person or entity. Employment Agencies, who have fee Agreements with Lockton Companies must submit applicants to the designated Lockton Companies Employment Coordinator to be eligible for placement fees.