Senior Engineer – Automation, Platform & Messaging

Description

The role sits in Global Workplace Services, which provides the company colleagues with a digital workplace they can use to collaborate in a hybrid setting, using secure, current and easy-to-use tools.

The Workplace department runs Microsoft 365, Microsoft Copilot, Copilot Studio, Power Platform and related platform capabilities on the Microsoft Cloud, including the governance, automation and operational controls needed to run them safely at enterprise scale.

The M365 Automation, Platform & Messaging Chapter manages generic Microsoft 365 platform services, Microsoft 365 Copilot and Copilot Studio, automation for self-service, provisioning, reporting and platform operations, and messaging services such as Exchange, fax and compliance archiving.

The chapter builds reusable automation libraries and engineering patterns, manages integrations and connectors, improves platform observability and resolves complex technical and security incidents.

You will act as a subject-matter expert and hands-on engineer across Microsoft 365, AI and automation, designing, building and running secure, reliable and scalable services that support employee productivity and controlled innovation.

Exchange and messaging experience is a strong advantage, and you may also contribute to those services depending on your expertise and interests.

Responsibilities

• Design, configure, operate and improve the generic Microsoft 365 tenant and platform capabilities.
• Turn business, security, risk and compliance requirements into scalable configurations, engineering standards and platform guardrails.
• Write and maintain configuration standards, access models, operating procedures and lifecycle processes for Microsoft 365 services.
• Track Microsoft service health, product changes and platform dependencies, and judge their impact on the company.
• Contribute to technical designs, architecture reviews, platform roadmaps and engineering decisions.
• Use automation and configuration control to make Microsoft 365 services more consistent, traceable and easier to maintain.
• Lead technical response during complex incidents, investigations, platform changes and escalations.
• Work with engineers in other Workplace chapters to improve shared capabilities and cut duplicated effort.
• Design, configure, operate and improve Microsoft 365 Copilot and Copilot Studio.
• Build and support enterprise-grade agents, agentic workflows and integrations with Microsoft 365 and other enterprise systems.
• Design integration patterns using Microsoft Graph, APIs, Power Platform connectors, custom connectors and other approved interoperability options.
• Configure and manage Copilot Studio and Power Platform environments, covering access, environment strategy, data policies and application lifecycle controls.
• Create reusable engineering patterns for agent development, testing, deployment, monitoring and support.
• Support controlled use of Microsoft 365 Copilot and Power Platform connectors, including technical assessment, access control and lifecycle management.
• Run Pay-As-You-Go and other consumption-based platform capabilities, including billing policies, access groups, usage monitoring and cost controls.
• Set up monitoring, evaluation and feedback for AI services and agents, covering health, usage, quality, failures, cost and operational risk.
• Help keep AI solutions secure, observable, auditable and aligned with the company's responsible-AI, data-protection and regulatory requirements.
• Apply human oversight, least privilege and secure-by-design principles wherever AI connects to workflows, enterprise data or business processes.
• Run and improve Power Platform capabilities used for enterprise automation and AI integration.
• Design and maintain environment strategies, Managed Environments, access models and application lifecycle processes.
• Implement Data Loss Prevention policies and connector controls that allow sensible innovation while protecting enterprise data.
• Assess standard, premium and custom connectors for security, authentication, authorization, data handling, supportability and operational ownership.
• Help makers and engineering teams use approved patterns to build, test and promote solutions through development, acceptance and production.
• Automate environment provisioning, policy assignment, deployment and monitoring where it makes sense.
• Help establish an operating model where every solution has clear ownership, lifecycle management, support arrangements and production controls.
• Design, build and run automation for self-service requests, user and service provisioning, platform administration, reporting and operational controls.
• Build straight-through processes that move requests from intake through validation, approval, implementation, evidence capture and completion with little manual effort.
• Develop reusable automation components, services, scripts and runbooks using PowerShell, Microsoft Graph, REST APIs, Power Automate and Azure services.
• Design and maintain Azure DevOps pipelines for build, test, deployment and configuration management.
• Apply Continuous Integration and Continuous Delivery to platform automation and agent solutions.
• Connect automation to ServiceNow, Azure DevOps, Microsoft 365, Power Platform, Entra ID and other enterprise platforms.
• Build in exception handling, logging, approvals, segregation of duties and rollback.
• Develop desired-state monitoring and configuration control to detect drift and improve stability.
• Replace repetitive manual work with secure, auditable and reusable automation where it delivers measurable value.
• Produce operational reporting and telemetry that show service health, provisioning, usage, costs, risks and control effectiveness.
• Design, configure and operate Exchange Online and related messaging capabilities.
• Engineer solutions for mail flow, transport rules, connectors, mailboxes, distribution and hybrid or cross-tenant dependencies.
• Support compliance archiving, retention, eDiscovery and regulatory messaging requirements with security and compliance specialists.
• Automate messaging administration, provisioning, reporting and configuration validation.
• Monitor service health, message flow, security signals, capacity and platform changes.
• Lead troubleshooting of complex messaging incidents and integration issues.
• Help modernize legacy messaging integrations and authentication patterns.
• Apply secure coding, peer review, automated testing, configuration control, documentation, monitoring and structured problem management.
• Make platform changes and automation reproducible, traceable and auditable, backed by evidence.
• Identify and reduce risks across Microsoft 365, AI, automation, integrations, connectors and messaging.
• Contribute to cyber-resilience, business continuity, audit, privacy, sourcing and compliance work.
• Apply least-privilege, separation-of-duties and privileged-access principles to administrative and automated capabilities.
• Build dashboards, alerts and telemetry that make platform health, control effectiveness, consumption and operational risk visible.
• Use incidents, service data and control findings to drive continuous improvement.
• Work closely with product managers, chapter leads, IT area leads, architects, engineers, security, risk, compliance, legal, sourcing and support teams.
• Turn business needs and policy requirements into practical engineering solutions and reusable platform capabilities.
• Explain designs, changes, incidents, risk assessments and service reviews clearly to technical and non-technical stakeholders.
• Challenge proposals constructively and push for standardization, reuse and automation before adding complexity.
• Coach engineers, review their technical work and raise engineering maturity across the chapter.
• Keep active relationships with Microsoft and other strategic suppliers to follow product direction, resolve platform issues and influence future capabilities.

Requirements

• Extensive experience designing, operating or improving enterprise-scale Microsoft 365 workplace services in a global environment.
• Proven experience leading engineering teams responsible for mission-critical platforms serving tens of thousands of users worldwide.
• Strong hands-on expertise across Microsoft 365 architecture, including Microsoft 365 Copilot, Power Platform, Microsoft 365 connectors and Graph API, Viva Suite, Azure subscriptions and pay-as-you-go models, Microsoft Purview, Exchange Online, Teams and Entra ID.
• Demonstrated expertise in enterprise architecture, Zero Trust security, identity and access management, data governance, information protection, data loss prevention, large-scale cloud transformation, API-based integrations, and automation and infrastructure as code.
• Experience running services in a regulated enterprise where security, privacy, resilience, auditability and employee experience must be balanced.
• Expert understanding of platform engineering principles, secure-by-design practices, service reliability and operational resilience.
• Proven experience setting up engineering practices such as DevSecOps, CI/CD, Site Reliability Engineering, observability, platform telemetry, engineering quality metrics and service resilience engineering.
• Proven record of improving service quality through automation, monitoring, documentation, configuration control and structured problem solving.
• Ability to turn complex technical topics into clear guidance, standards and operating procedures for engineers, support teams and stakeholders.
• Track record of using data, telemetry and business outcomes to guide technology decisions.
• Collaborative, with a strong sense of ownership, curiosity and a service mindset.
• Able to work independently while staying in touch with product, engineering, support, risk and security stakeholders.
• Able to challenge constructively, simplify complexity and decide on facts, data and user impact.
• Keeps developing to stay ahead of changes in technology, markets, regulation and the organization.
• Excellent spoken and written English.

Conditions

Hybrid working.

25-28 vacation days, depending on contract.

Recruiter contact is available through the advertisement.

Equal opportunity applies to all candidates.

Benefits

• Pension scheme.
• 13th month salary.
• 8% holiday payment.
• Personal growth and challenging work with many possibilities.
• Informal working environment with innovative colleagues.