M365 Architect w Kraków, Polska

M365 Architect

Miejsce pracy: Kraków

Technologies we use

Expected

• Microsoft 365
• SharePoint
• Microsoft Copilot
• Microsoft Entra ID
• Microsoft Purview

Operating system

• Windows

About the project

At Cyclad, we work with top international IT companies to help them deliver cutting-edge technologies that shape the future. We are currently looking for an experienced M365 Architect to join an international team working on a Microsoft 365 and AI governance project within the pharmaceutical and medical industry.

The project focuses on establishing and maintaining the Microsoft 365 tenant foundation required for Copilot and governed AI agents. In this role, you will be responsible for designing and evidencing tenant-level controls across Microsoft 365, Entra, Purview, Intune, and endpoint environments, ensuring the platform is ready for controlled rollout.

Project information:

Type of project: IT services

Industry: Pharmaceutical / Medical

Office location: Kraków, Poland

Work model: 100% remote

Budget: 130–170 PLN net/hour – B2B

Project length: Long-term

Start date: ASAP (depending on the candidate's availability)

Your responsibilities

• Design and maintain the Microsoft 365 tenant architecture and control baseline
• Configure and manage tenant-level Microsoft 365 policies and service settings
• Design and configure the Copilot Control System, including user access, experiences, and guardrails
• Establish auditable baselines and evidence for Microsoft 365 and Copilot controls
• Design Entra ID and Conditional Access policies, including directory hygiene and cohort group modelling
• Extend identity and access control models to non-human identities where AI agents are in scope
• Configure Microsoft Purview sensitivity labels, DLP, retention, and audit controls
• Assess and address oversharing risks across SharePoint and OneDrive
• Work with Intune and device compliance configurations as inputs to Conditional Access and security enforcement
• Conduct structured tenant readiness assessments for Microsoft 365 and Copilot rollouts
• Produce readiness scorecards, gap analyses, prerequisite checklists, and risk registers
• Identify and assess tenant-side prerequisites required for AI agent platforms
• Work with technical and security stakeholders to ensure tenant readiness for each rollout wave
• Analyse current configuration and usage data to identify gaps between documented and actual environments
• Define evidence requirements to demonstrate that controls are effectively implemented
• Design a tenant foundation that can be maintained and revalidated before each rollout wave
• Identify conditions and changes that should trigger tenant revalidation
• Communicate technical control decisions and their business impact to governance and non-technical stakeholders

Our requirements

• Strong professional experience as a Microsoft 365 Architect
• Deep hands-on knowledge of Microsoft 365 tenant architecture in enterprise environments
• Strong experience with Microsoft 365 Admin Center policies, update channels, and service configuration
• Strong knowledge of Microsoft 365 services, including Exchange, SharePoint, and Teams
• Hands-on experience with Microsoft Copilot governance and tenant-level controls
• Strong knowledge of Microsoft Entra ID and Conditional Access
• Experience with directory hygiene, group modelling, and identity governance
• Experience with Microsoft Purview, including sensitivity labels, DLP, retention, and auditing
• Strong knowledge of Intune and device compliance
• Experience conducting Microsoft 365 tenant readiness assessments
• Experience creating gap analyses, readiness scorecards, prerequisite checklists, and risk registers
• Understanding of identity and platform prerequisites for AI agents
• Strong analytical skills and ability to identify dependencies and genuine technical blockers
• Experience assessing current environments based on configuration and usage data
• Strong understanding of control evidence and auditability
• Ability to work with security, governance, and technical stakeholders
• Strong communication skills and ability to explain technical decisions to non-technical stakeholders
• Ability to work independently and collaboratively in an international environment

What we offer

• 100% remote working model
• Full-time cooperation agreement based on B2B
• Private medical care with dental care (covering 70% of costs)
• Multisport card (also for an accompanying person)
• Life insurance
• Opportunity to work in an international IT environment

Benefits

• sharing the costs of sports activities
• private medical care
• life insurance
• remote work opportunities
• flexible working time
• integration events
• dental care
• no dress code

Recruitment stages

• Introductory HR call
• Technical interview
• Final decision

Cyclad

In Cyclad we work with top international IT companies in order to boost their potential in delivering outstanding, cutting edge technologies that shape the world of the future.

Please enclose the following statement in your application: I hereby give consent for my personal data contained in the submitted application documents to be processed by Cyclad sp. z o.o., ul. Chłodna 48/1, 00-872 Warszawa, including my image, in relation to my participation in the recruitment process. I acknowledge that the above consent may be withdrawn at any time.
If you are interested in participating in future recruitment processes, please enclose the following statement in your application: I hereby give consent for my personal data contained in the submitted application documents to be processed by Cyclad Sp. z o.o., Cyclad sp. z o.o., ul. Chłodna 48/1, 00-872 Warszawa, including my image, in relation to my participation in future recruitment processes. I acknowledge that the above consent may be withdrawn at any time. The Personal Data Controller is Cyclad Sp. z o.o., ul. Chłodna 48/1, 00-872 Warszawa, e-mail: [email protected], contact with the Data Protection Officer is available via e-mail: [email protected]. Personal data collected through job applications (CV) within the scope provided for in labor regulations shall be processed in order to allow performance of the ongoing recruitment pursuant to Art. 6(1)(a) of Regulation (EU) no. 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (further referred to as GDPR). In case of giving consent to processing of data for future recruitment processes – personal data shall be processed under the consent, pursuant to Art. 6(1)(a) of the GDPR. If the Application form contains data referred to in Art. 9(1) of the GDPR, it shall be necessary to have the candidates consent for the processing of such data (Art. 9(2)(a) of the GDPR). The consent can be revoked at any time. Withdrawal of the consent shall not affect the lawfulness of the processing that had been performed under the consent prior to its withdrawal. Personal data provided by the candidate related to: - participation in a selected recruitment process will be stored until the recruitment process is completed for a given position, - participation in future recruitment processes will be stored until the candidate's consent to the processing of their data for this purpose is withdrawn, no longer, however, than for 5 years since the last update of the candidate’s data. Personal data may be disclosed to employees or associates of the Company, entities providing support to the Company on the basis of outsourced services or in accordance with data processing agreements, to entities authorized under the law, as well as to entities collaborating with the Company within the scope of job placement, in order to conduct recruitment processes. After the employee’s consent, personal data may also be disclosed to a potential employer for whom the recruitment process is being conducted. Submission of the candidate’s personal data within the scope under Art. 221 of the Labor Code is obligatory for participation in the recruitment process. Submission of other data by the candidate is voluntary. No submission of personal data within the required scope or objection to the processing of such data shall result in lack of possibility to include the Application in the recruitment processes conducted by the Company. The candidate has the right to access and rectify the contents of their data, remove such data, limit its processing, transfer such data, submit objection to the processing and revoke the consent at any time, without affecting the lawfulness of the processing conducted under such consent before it was withdrawn. The candidate also has the right to file a complaint with the President of the Office for Personal Data Protection when they consider the processing of their personal data to be a violation of the provisions of the GDPR.