Microsoft 365 & AI Solutions Engineer

Our client in the professional services sector is seeking a fulltime/permanent Microsoft 365 & AI Solutions Engineer to design, deploy, secure, and optimize Microsoft 365 environments for our clients while helping them adopt Microsoft Copilot and AI solutions.

You will work directly within client tenants across Microsoft 365, Entra ID, Intune, Purview, Teams, Exchange, SharePoint, Copilot and related Azure AI technologies. You will serve as a senior technical escalation point for complex Level 3 and Level 4 issues and work directly with client IT, security and technology leadership.

Location: Client offices in GTA area

Responsibilities

• Design, configure and deploy Microsoft 365 environments across Entra ID, Intune, Teams, Exchange Online and SharePoint Online.
• Lead Microsoft 365 Copilot deployments from readiness assessment through production rollout and user enablement.
• Assess data readiness and remediate oversharing, permissions and information governance risks prior to Copilot deployment.
• Design and implement Microsoft Purview capabilities including sensitivity labels, DLP, retention, insider risk and Data Security Posture Management (DSPM) for AI.
• Own identity and access management across Entra ID, including Conditional Access, Privileged Identity Management (PIM), entitlement management and hybrid identity.
• Design, build and govern AI agents using Microsoft Copilot Studio and Azure AI Foundry.
• Establish governance standards for Copilot, agents, enterprise data access and responsible AI adoption.
• Troubleshoot and resolve complex Level 3 and Level 4 Microsoft 365, identity, endpoint, security and integration issues.
• Automate administration and remediation activities using PowerShell and Microsoft Graph.
• Assess existing or poorly configured Microsoft environments and develop remediation and modernization plans.
• Produce architecture diagrams, technical documentation, implementation plans and operational runbooks.
• Work directly with client IT teams to implement solutions within production Microsoft environments.
• Present technical designs, risks and recommendations to CIOs, security leaders and other senior stakeholders.

Requirements

• 5+ years of hands-on experience engineering and supporting Microsoft 365 environments in production.
• Strong experience across Entra ID, Intune, Teams, Exchange Online and SharePoint Online.
• Strong identity and access management experience including Conditional Access, PIM, MFA, entitlement management and hybrid identity.
• Hands-on Microsoft Purview experience including sensitivity labels, DLP, retention, insider risk and information governance.
• At least one Microsoft 365 Copilot deployment taken from readiness assessment through production rollout to live users.
• Experience assessing and remediating data permissions, oversharing and security risks in preparation for Copilot.
• Experience with Microsoft Copilot Studio, Azure AI Foundry and/or enterprise AI agent development and governance.
• Strong PowerShell and Microsoft Graph experience for administration, automation and remediation.
• Experience troubleshooting complex Microsoft 365 environments and acting as a Level 3/4 escalation point.
• Previous consulting, professional services or Managed Service Provider (MSP) experience.
• Strong client-facing communication and documentation skills, with the ability to present to senior IT and security leadership.
• Must hold two or more of the following certifications: MS-102 (Microsoft 365 Administrator), SC-300 (Identity and Access Administrator Associate), SC-401 (Information Security Administrator Associate), or MD-102 (Endpoint Administrator Associate).
• Additional certifications such as Microsoft 365 Certified: Administrator Expert, AB-900, AI-103, AZ-104, SC-200 or SC-500 are considered an asset. Retired SC-400, AI-102 and AZ-500 certifications will also be recognized.
• Must live within reasonable commuting distance of the west end of the Greater Toronto Area.
• Must be able and willing to work onsite at client locations up to 5 days per week, unless otherwise specified by the engagement.