Cloud Engineer M365 & AI

Location: Remote

Hiring Range: This position’s hiring range is anticipated to be $90,000-$120,000 annually, depending on experience, plus great benefits!

Position Summary: The Cloud Engineer M365 and AI is responsible for the implementation, configuration, and operational management of Microsoft 365 AI capabilities, with a primary focus on Microsoft Copilot and AI‑enabled M365 services. This role ensures that AI features within the Microsoft ecosystem are deployed reliably, integrated effectively with enterprise platforms, and operated in alignment with organizational standards for security, identity, and data governance. The role sits within the infrastructure and cloud engineering function and works closely with security, identity, and cloud engineering teams to deliver a scalable and well managed M365 and M365 AI platform that supports productivity while maintaining control and visibility.

Culture Statement and Responsibility: We believe in treating everyone with kindness and compassion, building trust through authenticity and following through on commitments. We prioritize well-being alongside our mission, fostering strong relationships through open communication and transparent feedback. Diversity and inclusion are integral to our culture, enriching team dynamics by valuing diverse perspectives. Each team member is responsible for creating an inclusive environment where all voices are respected and contributing to a workplace that embodies our shared values and commitment to progress. By consistently aligning our actions with our Guiding Principles, we strengthen our culture and ensure that our values are lived every day.

Essential Duties and Responsibilities: 

Treat people around you with Kindness and Compassion, build trust by demonstrating authenticity and following through on your commitments, prioritize your well-being like you do our mission, and work to build strong relationships with your colleagues by participating in communication loops to share and receive honest feedback. You are responsible and accountable for the culture you add to your team dynamic.

Microsoft 365 AI & Copilot Platform Engineering

• Support secure rollout and governance of AI tools such as Microsoft Copilot within the M365 environment.
• Manage Copilot readiness and prerequisites, including Licensing and service enablement, Tenant‑level configurations, feature rollout and adoption metrics.
• Configure Copilot experiences across supported workloads (e.g., Microsoft 365 apps, Teams, SharePoint, OneDrive).
• Partner with security Engineers to ensure Copilot access aligns with enterprise policies.
• Copilot & AI Agent Development: Designing and optimizing custom copilots using Microsoft Copilot Studio to enhance user productivity.
• Infrastructure & Security: Implementing governance, compliance, and security measures in enterprise M365 environments.
• Collaborate with security engineers to support secure and compliant AI platform usage.

​M365 Platform & Tenant Management

• Support the overall health, configuration, and lifecycle management of the Microsoft 365 tenant.
• Administer and optimize Microsoft 365 services including Exchange Online, SharePoint Online, and Teams
• Assist with feature enablement, change management, and platform updates related to AI and other M365 features.
• Configure and manage tenant-wide policies for collaboration, data sharing, and external access.
• Implement data protection controls including sensitivity labels, DLP policies, and retention policies using Microsoft Purview
• Assist with implement and management of Microsoft Intune environment
• Troubleshoot platform‑level issues affecting AI and other productivity services.

Identity & Access Integration

• Work closely with cloud and security teams to support Identity Management with Entra ID and Okta integration for AI enabled services.
• Assist in implementing and maintaining, Role‑based access models, Group‑based licensing and Conditional access dependencies for AI workloads
• Ensure AI platform behavior aligns with identity and access design decisions
• Manage device and access policies to protect data exposure through AI-powered applications
• Collaborate with security teams to enforce data boundaries and access controls for AI integrations

Data Platform Integration

• Assist in Structuring SharePoint and OneDrive environments to support effective AI usage. Improving content discoverability while respecting access controls.
• Partner with data and security teams to ensure AI features operate within approved data boundaries.
• Architecting and managing AI Agents and Snowflake AI Integrations.
• AI Integration: Applying Retrieval-Augmented Generation (RAG) techniques to connect AI models with company data sources, improving contextual accuracy.

AI Platform Operations & Monitoring

• Monitor service health, adoption metrics, and usage trends for AI‑enabled M365 services.
• Assist in identifying misconfigurations or platform issues that may impact AI behavior or performance.
• Support incident response and troubleshooting efforts related to M365 AI services.
• Document operational procedures, configurations, and platform dependencies.

Required Qualifications

• 5+ years of experience in Microsoft 365 administration, platform engineering, or digital workplace engineering.
• 5+ year experience managing Microsoft 365 services (Exchange Online, SharePoint Online, Teams, OneDrive).
• Working knowledge of Microsoft Entra ID (Azure AD) and identity concepts.
• Familiarity with Microsoft Copilot or other AI enabled M365 features.
• Ability to troubleshoot platform and service integration issues.
• Experience supporting Microsoft Copilot deployments in an enterprise environment.
• Familiarity with M365 security and compliance features (e.g., Purview, DLP for Office 365).
• Understanding of data classification, sensitivity labels, and information protection concepts.
• Exposure to automation or scripting (PowerShell) for M365 administration.

Preferred Qualifications

• Experience in AI risk management initiatives that provide observability data to ensure compliance and risk assessment of AI systems.
• Familiarity with AI related risk frameworks (e.g., OWASP Top 10 for LLMs, NIST AI Risk Management Framework).

Physical and Other Requirements

• Able to work at a computer for extended periods of time with repetitive typing, arm and hand motion.
• Some light travel may be required

Thank you for your interest in pursuing a career at Best Friends Animal Society. Best Friends Animal Society is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to their race, color, religion, ancestry, national origin, sex, sexual orientation, age, disability, marital status, or domestic partner status.

Applicants for employment in the U.S. must have valid work authorization that does not now and/or will not in the future require sponsorship of a visa for employment authorization in the U.S. by Best Friends Animal Society.