About the role

Senior Microsoft 365 EngineerAbout Us

Waystone is a leading provider of institutional governance, administration, risk and compliance services to the asset management industry. With over 25 years’ experience, we support many of the world’s largest asset managers, providing a comprehensive range of specialist services from a global network of offices.

The Platform Engineering team builds and operates the secure, automated foundations that Waystone’s regulated services run on – from our cloud platform to the Microsoft 365 tenant the whole firm collaborates in. As the firm adopts Microsoft 365 Copilot and AI agents, Microsoft 365 is becoming a platform in its own right, and we need engineers who can run it securely, govern it properly and build on it. We are looking for a Senior Microsoft 365 Engineer to be the technical lead and subject matter expert for Microsoft 365, including how the firm builds, governs and secures AI agents.

We are a cross-skilled team by design: rather than narrow specialisation, we want every engineer able to work across the platform, giving us broader coverage, resilience and shared ownership.

Key Responsibilities

Act as the technical lead and subject matter expert for the firm’s Microsoft 365 tenant, owning its architecture, configuration standards and roadmap.
Lead large and complex Microsoft 365 projects end to end – migrations, tenant changes and new service rollouts – delegating and reviewing work across the team.
Own the operating model for Microsoft 365 Copilot and AI agents: how agents are built, approved, published, monitored and retired across Copilot Studio, Copilot Agent Builder and SharePoint agents.
Design and implement agent governance using Microsoft Agent 365, the Microsoft 365 admin center and the Power Platform admin center – agent inventory and registry, publishing controls, environment strategy, and DLP and connector policies.
Define identity and access controls for agents using Microsoft Entra Agent ID, Conditional Access and least-privilege permissions, working closely with InfoSec.
Build agents in Copilot Studio and automation in Power Automate that solve real business problems, and set the standards and guardrails that makers across the business work to.
Lead data protection for collaboration and AI using Microsoft Purview – sensitivity labels, DLP, retention and eDiscovery – to prevent oversharing and meet the firm’s obligations (SOC 2, ISO 27001, GDPR, DORA, ISO 42001, EU AI Act).
Own the security baselines and lifecycle policies for Exchange Online, Teams, SharePoint Online and OneDrive, including external sharing and guest access.
Automate tenant administration using PowerShell and Microsoft Graph, and bring Microsoft 365 configuration under version control and peer review.
Manage licensing, usage and cost across Microsoft 365, including Copilot licence allocation and agent consumption, and drive optimisation.
Act as the escalation point for complex, often undefined incidents spanning multiple teams, leading deep root cause analysis and systemic fixes.
Track the Microsoft 365 roadmap and Message Center, assess the impact of new features and advise leadership on adoption and risk.
Engage with Microsoft, partners and vendors on escalations, licensing and roadmap.
Contribute to departmental planning, including the Microsoft 365 roadmap, budget and licensing input.
Coach, mentor and review the work of other engineers, and share Microsoft 365 and Copilot knowledge across the firm.
Document standards, designs and runbooks in Confluence and our internal Platform Portal to enable self-service.
Participate in the on-call rota to support critical Microsoft 365 and platform services.

Essential Knowledge & Experience

Bachelor’s degree (e.g. B.E./B.Tech) in Computer Science, IT or a related field, or equivalent practical experience, with a minimum of eight years’ experience in Microsoft 365 engineering, administration or a closely related role.
Recognised deep expertise across Exchange Online, Teams, SharePoint Online, OneDrive and Microsoft Entra ID.
Hands-on experience deploying and governing Microsoft 365 Copilot, and building and publishing agents in Copilot Studio.
Strong understanding of agent governance – Microsoft Agent 365, Entra Agent ID, Power Platform environments, and DLP and connector policies.
Strong experience with Microsoft Purview (sensitivity labels, DLP, retention, eDiscovery) and with preventing oversharing in Copilot and SharePoint.
Expert in PowerShell and Microsoft Graph for automation and administration at scale.
Strong identity knowledge – Entra ID, Conditional Access, Privileged Identity Management and hybrid identity.
Proven track record of leading complex Microsoft 365 projects and migrations.
Able to influence stakeholders, advise leadership and engage confidently with vendors and partners.
Experience coaching and mentoring engineers.
AI-literate – able to apply AI-assisted tooling in your own work, and to understand AI risks such as data leakage, oversharing and prompt injection well enough to design controls against them.
Able to manage multiple concurrent workstreams – balancing project delivery, BAU and support commitments – prioritising effectively and working with limited oversight.
Comfortable collaborating with UK-based colleagues across time zones as part of a global team.
Able to participate in the on-call rota – on-call is a requirement of this role.

Desirable

Microsoft certifications such as Microsoft 365 Administrator Expert (MS-102), Identity and Access Administrator (SC-300), Information Security Administrator (SC-401) or Power Platform (PL-200).
Experience operating in a regulated financial services or otherwise highly governed environment.
Familiarity with AI governance frameworks such as ISO 42001 and the EU AI Act.
Pro-code agent development experience (e.g. Microsoft 365 Agents SDK, Microsoft Foundry).
Configuration-as-code for Microsoft 365 (e.g. Microsoft365DSC) with Git-based workflows.
Experience with Microsoft Defender for Office 365 and Intune.
Exposure to Azure and Infrastructure as Code (Terraform).

Additional Information

Participation in the on-call rota is a requirement of this role; standing on-call allowances apply.

The opportunity to shape how the firm adopts and governs AI agents, with support towards Microsoft certifications and cross-skilling into the wider platform.

You will join a global, collaborative team that values innovation, ownership and continuous learning, with a direct impact on how the firm works and adopts AI.