Power Platform & Workload Governance Engineer

• Configure environment strategy and landing zones: tiered and functional environments, environment groups, Development to Stage/UAT to Production models, naming, ownership, maker and admin access, and provisioning standards.
• Design and configure classic and advanced DLP policies and connector classification; disable restricted connectors by default and run impact analysis so nothing breaks unintentionally at design time or run time.
• Implement ALM: solution packaging, versioning, environment variables, Power Platform Pipelines and Azure DevOps approval flows, and rollback procedures, validated through end-to-end test deployments.
• Deploy, customize, and operationalize the CoE Starter Kit and Copilot Studio Starter Kit; assess environment structure, usage, maker activity, connector risk, licensing blockers, and admin processes.
• Define and apply Entra ID security group naming standards and security role models across environments, and validate assignments.
• Run environment strategy, DLP, ALM, licensing and capacity, and monitoring workshops with client platform teams.

• Implement Microsoft 365 collaboration governance: Teams, SharePoint, and Exchange policy, external sharing, lifecycle, and retention.
• Apply Azure governance: landing zones, Azure Policy enforcement, RBAC, tagging, and cost controls for workloads that extend the Power Platform.
• Govern the pro-code edge of the platform: custom connectors, Logic Apps, Azure Functions, API Management, and secrets handling.

• Configure Copilot Studio governance controls: maker access and publishing models, Copilot Studio-specific DLP, credit consumption caps, and production promotion checkpoints.
• Support agent intake and lifecycle processes, including ServiceNow or ITSM-based intake, metadata, ownership, and lifecycle states.
• Govern Dataverse security and data ownership, and coordinate with Purview and data governance specialists on labeling and DLP.

• Work directly with client Power Platform administrators and platform owners; explain what each setting does and why it matters.
• Deliver knowledge transfer and operational handoff so client teams can run what we build.
• Contribute to deliverables: environment and governance models, ALM and deployment runbooks, validation summaries, and policy templates.

• 4+ years of enterprise Microsoft platform experience, with 3+ years hands-on in Power Platform administration, governance, or architecture across multiple environments and business units.
• Strong hands-on experience with Power Apps, Power Automate, Dataverse, and the Power Platform Admin Center (PPAC). You can navigate PPAC quickly and know what each setting does.
• Proven experience with environment strategy, DLP design and enforcement, managed environments, and solution ownership and access control models.
• Hands-on ALM with Power Platform Pipelines or Azure DevOps, including approval gates and multi-stage promotion.
• Working knowledge of Microsoft 365 administration and Azure governance fundamentals (Azure Policy, RBAC, landing zones).
• Working knowledge of Copilot Studio and how agents are built, published, and secured.
• Solid understanding of Entra ID, least privilege, conditional access, and auditability.
• Clear, confident client communication and strong emotional intelligence; you explain technical choices plainly and build trust with client admins.
• Able to work remotely within the United States or Canada with reliable overlap for Eastern and Central business hours.

• You have deployed and operationalized the CoE Starter Kit at a real client, not just installed it.
• You have designed a DLP policy that did not break every flow, and can explain how you ran the impact analysis.
• You have built a Development to Stage/UAT to Production pipeline with approval gates that client teams still use.
• You have informed opinions on managed environments versus default, and where the current platform guardrails fall short.

• Pro-code depth: Azure Functions, Logic Apps, custom connectors, API Management, and PowerShell or the Power Platform CLI for admin automation.
• Microsoft Purview basics: sensitivity labels, DLP, and retention.
• Microsoft Fabric and Dataverse-to-Fabric integration patterns.
• ServiceNow or ITSM integration for environment and agent requests.
• Certifications such as PL-400, PL-600, PL-900, MS-102, or AZ-104, or equivalent experience.
• Consulting or professional services experience.

Cyclotron is an Equal Opportunity Employer. Cyclotron values diversity, equity and inclusion, and aims to practice DE&I in all that we do.