M365 Architect

At Cyclad, we work with top international IT companies to help them deliver cutting-edge technologies that shape the future. We are currently looking for an experienced M365 Architect to join an international team working on a Microsoft 365 and AI governance project within the pharmaceutical and medical industry.

The project focuses on establishing and maintaining the Microsoft 365 tenant foundation required for Copilot and governed AI agents. In this role, you will be responsible for designing and evidencing tenant-level controls across Microsoft 365, Entra, Purview, Intune, and endpoint environments, ensuring the platform is ready for controlled rollout.

Project information:

• Type of project: IT services
• Industry: Pharmaceutical / Medical
• Office location: Kraków, Poland
• Work model: 100% remote
• Budget: 130–170 PLN net/hour – B2B
• Project length: Long-term
• Start date: ASAP (depending on the candidate's availability)

Your responsibilities:

• Design and maintain the Microsoft 365 tenant architecture and control baseline
• Configure and manage tenant-level Microsoft 365 policies and service settings
• Design and configure the Copilot Control System, including user access, experiences, and guardrails
• Establish auditable baselines and evidence for Microsoft 365 and Copilot controls
• Design Entra ID and Conditional Access policies, including directory hygiene and cohort group modelling
• Extend identity and access control models to non-human identities where AI agents are in scope
• Configure Microsoft Purview sensitivity labels, DLP, retention, and audit controls
• Assess and address oversharing risks across SharePoint and OneDrive
• Work with Intune and device compliance configurations as inputs to Conditional Access and security enforcement
• Conduct structured tenant readiness assessments for Microsoft 365 and Copilot rollouts
• Produce readiness scorecards, gap analyses, prerequisite checklists, and risk registers
• Identify and assess tenant-side prerequisites required for AI agent platforms
• Work with technical and security stakeholders to ensure tenant readiness for each rollout wave
• Analyse current configuration and usage data to identify gaps between documented and actual environments
• Define evidence requirements to demonstrate that controls are effectively implemented
• Design a tenant foundation that can be maintained and revalidated before each rollout wave
• Identify conditions and changes that should trigger tenant revalidation
• Communicate technical control decisions and their business impact to governance and non-technical stakeholders

Requirements:

• Strong professional experience as a Microsoft 365 Architect
• Deep hands-on knowledge of Microsoft 365 tenant architecture in enterprise environments
• Strong experience with Microsoft 365 Admin Center policies, update channels, and service configuration
• Strong knowledge of Microsoft 365 services, including Exchange, SharePoint, and Teams
• Hands-on experience with Microsoft Copilot governance and tenant-level controls
• Strong knowledge of Microsoft Entra ID and Conditional Access
• Experience with directory hygiene, group modelling, and identity governance
• Experience with Microsoft Purview, including sensitivity labels, DLP, retention, and auditing
• Strong knowledge of Intune and device compliance
• Experience conducting Microsoft 365 tenant readiness assessments
• Experience creating gap analyses, readiness scorecards, prerequisite checklists, and risk registers
• Understanding of identity and platform prerequisites for AI agents
• Strong analytical skills and ability to identify dependencies and genuine technical blockers
• Experience assessing current environments based on configuration and usage data
• Strong understanding of control evidence and auditability
• Ability to work with security, governance, and technical stakeholders
• Strong communication skills and ability to explain technical decisions to non-technical stakeholders
• Ability to work independently and collaboratively in an international environment

We offer:

• 100% remote working model
• Full-time cooperation agreement based on B2B
• Private medical care with dental care (covering 70% of costs)
• Multisport card (also for an accompanying person)
• Life insurance
• Opportunity to work in an international IT environment

Recruitment process:

• Introductory call
• Technical interview
• Final decision