Sr MS365 Engineer - Copilot & Power Platform Operations

Lockton; Kansas City (MO); On-site; USD 120,000 - 180,000; Full time

Job summary

Lockton is seeking a Senior M365 Engineer – Copilot & Power Platform Operations to manage the secure operation and governance of Microsoft 365 Copilot, Copilot Studio, and supporting Power Platform services. This role partners with Information Security and Compliance to enforce tenant settings, environments, and access controls.

The engineer provides senior-level Microsoft 365 support, reviews changes and advisories, and serves as an escalation point for Copilot, Power Platform, and tenant-level

Qualifications

• Experience configuring tenant-wide Copilot settings and access controls.
• Ability to scope Copilot availability via security groups and licensing.
• Experience with RBAC, Entra ID, and DLP considerations for corporate data.

Responsibilities

• Manage secure operation and governance of Copilot, Studio, and Power Platform.
• Administer environments, access controls, and data-loss-prevention policies.
• Serve as escalation point for Copilot and tenant-level issues.

Skills

Microsoft 365 Copilot

Entra ID / RBAC

Power Platform governance

Security/compliance collaboration

Tools

Copilot Studio

Power Platform

Entra ID

Job description

Your Responsibilities

The Senior M365 Engineer – Copilot & Power Platform Operations manages the secure operation and governance of Microsoft 365 Copilot, Copilot Studio, and supporting Power Platform services. This role administers tenant settings, environments, access controls, agents, connectors, and data-loss-prevention policies in partnership with Information Security and Compliance. The engineer also provides senior-level Microsoft 365 support and serves as an escalation point for Copilot, Power Platform, and tenant-level operational issues.

Qualifications

• Configure and maintain tenant-wide Microsoft 365 Copilot settings and access controls in the Microsoft 365 Admin Center.
• Scope Microsoft 365 Copilot availability using Microsoft Entra ID security groups and licensing aligned with InfoSec and Compliance requirements.
• Enable, restrict, block, deploy, and retire Microsoft 365 Copilot agents as part of standard M365 tenant operations.
• Review and deploy Microsoft-built Copilot agents in coordination with InfoSec and Compliance.
• Administer Copilot Studio as a Microsoft 365 platform capability, including default, sandbox, and production environment separation.
• Manage Copilot Studio environment access, security groups, and isolation boundaries using Entra ID.
• Control who can create, edit, publish, and share Copilot Studio agents based on approved M365 access models.
• Configure Copilot Studio agent sharing scope, authentication behavior, and publishing targets with InfoSec and Compliance review.
• Administer Power Platform environments that support Copilot Studio and Microsoft 365 Copilot agent functionality.
• Configure and enforce Power Platform DLP policies protecting Microsoft 365 data sources.
• Manage connectors and actions used by Copilot Studio agents and Power Automate flows that interact with Microsoft 365 services.
• Design and enforce RBAC using Entra ID roles, security groups, licensing, and platform-specific permissions.
• Review agent capabilities and data access impacting core Microsoft 365 services, including Exchange Online, Microsoft Teams, SharePoint Online, and OneDrive, with InfoSec and Compliance prior to enablement.
• Monitor and respond to Microsoft 365 service changes, feature releases, and security advisories affecting Copilot and Power Platform.
• Investigate and remediate security or compliance findings related to Copilot, agent access, or Microsoft 365 data exposure.
• Ensure Copilot and agent behavior aligns with established Microsoft 365 tenant security and compliance standards.
• Provide senior-level M365 engineering support across Exchange Online, Microsoft Teams, SharePoint Online, OneDrive, and Microsoft Entra ID.
• Ensure Copilot integrates cleanly with existing Microsoft 365 identity, messaging, collaboration, and data services.
• Act as an escalation point for Microsoft 365 Copilot, Power Platform, and tenant-level operational issues.
• Develop and maintain Microsoft 365 operational standards and runbooks for Copilot and agent administration in collaboration with InfoSec and Compliance.