The role in one sentenceLead a 90-day engagement that turns a Fortune-class regulated enterprise’s unmanaged Power Platform, Copilot Studio, and M365 estate into a governed, classified, observable, ROI-tracked capability — and convert into a PTM full-time hire on successful delivery. Why this role existsProactive Technology Management (PTM) Fusion has committed to a 90-day Power Platform and Copilot Studio governance program for a Fortune-class regulated enterprise client. The engagement runs in two phases: Phase 1 — Discovery & Assess (30 days). Inventory and risk-rank the estate (apps, flows, agents, environments, sensitivity-labeled data flows). Map current ALM, identity, Center of Excellence (CoE) Kit, and Microsoft Purview posture against PTM and Microsoft baselines. Quantify Copilot Studio agent exposure and observability gaps. Deliver a prioritized governance backlog with measurable ROI. Phase 2 — Implement & Govern (60 days). Stand up the CoE Kit, Power Platform DLP and environment strategy, and Purview-aligned classification, labeling, and retention policy. Wire Application Lifecycle Management (ALM) pipelines for both makers and pro-developers. Operationalize Copilot Studio agent governance — authentication, content moderation, audit. Light up an Azure Monitor and Log Analytics observability surface tied to the agreed value metric. What you'll deliverA risk-ranked inventory of every app, flow, agent, environment, sensitivity label, and DLP policy across the client tenant. A current-state assessment of ALM, identity, Power Platform DLP, Microsoft Purview information protection, retention, audit, and Compliance Manager posture — mapped to PTM and Microsoft reference architectures. A prioritized governance backlog with one-line ROI rationale per item, ready to drive Phase 2 scope confirmation. A deployed and operating Power Platform CoE Kit with environment strategy, tenant- and environment-level DLP policies, and connector classification rationale. ALM pipelines (Power Platform Pipelines or ALM Accelerator + GitHub Actions / Azure DevOps) serving both citizen-developer and pro-developer paths. A Purview governance baseline: sensitivity label taxonomy with auto-labeling rules, M365 DLP policies covering Exchange / SharePoint / OneDrive / Teams / Endpoint, retention label and policy framework, audit (Standard or Premium) configuration, and Compliance Manager assessment posture. Copilot Studio agent governance with authenticated Entra-bound knowledge sources, content controls, audit logging, Purview-for-Copilot DSPM-for-AI configuration, and red-team review of high-exposure agents. A live observability surface built on Azure Monitor, Log Analytics, Application Insights, and Power BI — including diagnostic settings on Power Platform, KQL workbooks for governance KPIs, alert rules on policy drift, and an executive dashboard reporting against the value metric agreed during Discovery. Solution Architecture Document (SAD), Solution Design Document (SDD), and milestone roadmap authored against PTM templates and reviewed under our Maker-Checker discipline. Who you areYou can hold a discovery conversation with a Chief Information Officer in the morning, run an Event Storming session with a finance director after lunch, and ship a Dataverse security-role design before dinner. You communicate in plain language to business owners and in precise technical terms to engineers, often in the same meeting. You believe governance is a value engine, not a brake. You measure success in ROI delivered, not artifacts produced.RequirementsPower Platform & Copilot Studio (depth required) 5+ years delivering on Microsoft Power Platform in enterprise or mid-market environments, with at least 2 full lifecycles of CoE Kit deployment and operation. Deep working knowledge of Power Platform ALM: solution layering, managed solutions, environment strategy, Power Platform Pipelines or the ALM Accelerator, and integration with GitHub Actions or Azure DevOps. SailPoint - Proven expertise with Identity Governance & Administration (IGA) platforms, specifically SailPoint Hands-on experience implementing, configuring, and maintaining SailPoint solutions (e.g., IdentityIQ, IdentityNow) Dataverse — security model, table and relationship design, plug-ins, business rules, and auditing. Power Platform DLP policies — connector classification, tenant- vs environment-level scoping, endpoint filtering for HTTP and SQL connectors, custom connector handling. Copilot Studio — agent topic design, knowledge sources, generative answers, plugins and connectors, authentication, content moderation, and audit. You have stood up at least one production-grade agent end-to-end. Microsoft Purview & M365 governance (depth required) Microsoft Purview Information Protection — sensitivity label taxonomy design, manual labeling, auto-labeling policies (client-side and service-side), and label-driven encryption. Microsoft Purview Data Loss Prevention across Exchange, SharePoint, OneDrive, Teams, and Endpoint DLP, including policy tuning, incident triage, and integration with Power Platform DLP. Data classification using built-in, custom, exact-data-match, and trainable classifiers. Retention labels and retention policies, records management, and disposition review. Microsoft Purview Audit (Standard and Premium), audit log search and export, and integration with downstream SIEM. Microsoft Compliance Manager — assessment selection, improvement actions, and executive reporting. Purview for Copilot — DSPM for AI configuration, sensitivity-aware grounding, prompt and response auditing. Identity & observability (depth required) Microsoft Entra ID — app registrations, service principals, conditional access, and how all of the above bind to Power Platform DLP and Purview policies. Azure Monitor and Log Analytics — workspace design, diagnostic settings on Power Platform and Dataverse, KQL fluency, workbook authoring, alert rules, and action groups. Application Insights for component-level telemetry on custom connectors, plug-ins, and Copilot Studio agents. Power BI dashboards that report a value metric a non-technical executive can act on. Consulting craft (depth required) Demonstrated ability to author and present architecture artifacts to a CTO-level audience: C4 diagrams, SADs, SDDs, milestone roadmaps. A discovery toolkit you actually use — Lean UX, BPMN, Event Storming, or comparable methods for translating ambiguous client problems into a prioritized backlog with measurable outcomes. Strongly PreferredMicrosoft certifications: PL-600 (Power Platform Solution Architect), PL-400 (Developer), SC-400 (Information Protection & Compliance Administrator), SC-300 (Identity & Access Administrator). Experience integrating Power Platform with Microsoft Fabric, Dataverse long-term retention, or Azure SQL. Microsoft Sentinel integration for governance signals and audit-log SIEM tier. Familiarity with Bicep + Azure Developer CLI (azd) for any Azure-side resources adjacent to the Power Platform estate. Prior delivery in regulated environments (medical device, life sciences, healthcare, or financial services) and comfort with the documentation discipline that comes with them. Experience as a subcontractor or partner-of-partner — you know how to represent PTM cleanly inside multi-vendor delivery teams and inside the end client’s governance forums. How you workSearch before assumptions. You verify against current docs, the client tenant, and runtime evidence before recommending. Confidence without evidence is not a substitute for either. Contracts before code. You define the interface — security roles, environment policies, label taxonomy, ALM gates — before anyone builds against it. Validators before delivery. Every governance control ships with a test that proves it works and an alert that fires when it stops working. Maker-Checker over solo heroics. You welcome a second pair of eyes on every material design decision, and you give the same in return. Plain and clear language. A 12-year-old can follow your milestone narrative. A CTO trusts your architecture. A business owner sees the ROI line. Engagement detailsEngagement structure. Contract-to-hire. Initial term covers the full 90-day engagement (30 days Discovery + 60 days Implementation). Conversion to PTM Fusion full-time hire on successful delivery and mutual fit. Capacity. This posting is for one full-time-equivalent role. PTM may staff a second practitioner alongside you depending on scope confirmed at the close of Discovery; we are open to candidates interested in either the lead or the partnered configuration. Location. Remote, US-based. Compensation. Competitive contract rate during the engagement; market-aligned base, performance bonus, and benefits package on conversion. Final terms commensurate with experience and certifications. Start. Immediate. Discovery kicks off as soon as the right candidate is in seat. BenefitsPossibility of contract-to-hire
The role in one sentence
Lead a 90-day engagement that turns a Fortune-class regulated enterprise’s unmanaged Power Platform, Copilot Studio, and M365 estate into a governed, classified, observable, ROI-tracked capability — and convert into a PTM full-time hire on successful delivery.
Why this role exists
Proactive Technology Management (PTM) Fusion has committed to a 90-day Power Platform and Copilot Studio governance program for a Fortune-class regulated enterprise client. The engagement runs in two phases:
- Phase 1 — Discovery & Assess (30 days). Inventory and risk-rank the estate (apps, flows, agents, environments, sensitivity-labeled data flows). Map current ALM, identity, Center of Excellence (CoE) Kit, and Microsoft Purview posture against PTM and Microsoft baselines. Quantify Copilot Studio agent exposure and observability gaps. Deliver a prioritized governance backlog with measurable ROI.
- Phase 2 — Implement & Govern (60 days). Stand up the CoE Kit, Power Platform DLP and environment strategy, and Purview-aligned classification, labeling, and retention policy. Wire Application Lifecycle Management (ALM) pipelines for both makers and pro-developers. Operationalize Copilot Studio agent governance — authentication, content moderation, audit. Light up an Azure Monitor and Log Analytics observability surface tied to the agreed value metric.
What you'll deliver
- A risk-ranked inventory of every app, flow, agent, environment, sensitivity label, and DLP policy across the client tenant.
- A current-state assessment of ALM, identity, Power Platform DLP, Microsoft Purview information protection, retention, audit, and Compliance Manager posture — mapped to PTM and Microsoft reference architectures.
- A prioritized governance backlog with one-line ROI rationale per item, ready to drive Phase 2 scope confirmation.
- A deployed and operating Power Platform CoE Kit with environment strategy, tenant- and environment-level DLP policies, and connector classification rationale.
- ALM pipelines (Power Platform Pipelines or ALM Accelerator + GitHub Actions / Azure DevOps) serving both citizen-developer and pro-developer paths.
- A Purview governance baseline: sensitivity label taxonomy with auto-labeling rules, M365 DLP policies covering Exchange / SharePoint / OneDrive / Teams / Endpoint, retention label and policy framework, audit (Standard or Premium) configuration, and Compliance Manager assessment posture.
- Copilot Studio agent governance with authenticated Entra-bound knowledge sources, content controls, audit logging, Purview-for-Copilot DSPM-for-AI configuration, and red-team review of high-exposure agents.
- A live observability surface built on Azure Monitor, Log Analytics, Application Insights, and Power BI — including diagnostic settings on Power Platform, KQL workbooks for governance KPIs, alert rules on policy drift, and an executive dashboard reporting against the value metric agreed during Discovery.
- Solution Architecture Document (SAD), Solution Design Document (SDD), and milestone roadmap authored against PTM templates and reviewed under our Maker-Checker discipline.
Who you are
You can hold a discovery conversation with a Chief Information Officer in the morning, run an Event Storming session with a finance director after lunch, and ship a Dataverse security-role design before dinner. You communicate in plain language to business owners and in precise technical terms to engineers, often in the same meeting.
You believe governance is a value engine, not a brake. You measure success in ROI delivered, not artifacts produced.
Requirements
Power Platform & Copilot Studio (depth required)
- 5+ years delivering on Microsoft Power Platform in enterprise or mid-market environments, with at least 2 full lifecycles of CoE Kit deployment and operation.
- Deep working knowledge of Power Platform ALM: solution layering, managed solutions, environment strategy, Power Platform Pipelines or the ALM Accelerator, and integration with GitHub Actions or Azure DevOps.
- SailPoint - Proven expertise with Identity Governance & Administration (IGA) platforms, specifically SailPoint
- Hands-on experience implementing, configuring, and maintaining SailPoint solutions (e.g., IdentityIQ, IdentityNow)
- Dataverse — security model, table and relationship design, plug-ins, business rules, and auditing.
- Power Platform DLP policies — connector classification, tenant- vs environment-level scoping, endpoint filtering for HTTP and SQL connectors, custom connector handling.
- Copilot Studio — agent topic design, knowledge sources, generative answers, plugins and connectors, authentication, content moderation, and audit. You have stood up at least one production-grade agent end-to-end.
Microsoft Purview & M365 governance (depth required)
- Microsoft Purview Information Protection — sensitivity label taxonomy design, manual labeling, auto-labeling policies (client-side and service-side), and label-driven encryption.
- Microsoft Purview Data Loss Prevention across Exchange, SharePoint, OneDrive, Teams, and Endpoint DLP, including policy tuning, incident triage, and integration with Power Platform DLP.
- Data classification using built-in, custom, exact-data-match, and trainable classifiers.
- Retention labels and retention policies, records management, and disposition review.
- Microsoft Purview Audit (Standard and Premium), audit log search and export, and integration with downstream SIEM.
- Microsoft Compliance Manager — assessment selection, improvement actions, and executive reporting.
- Purview for Copilot — DSPM for AI configuration, sensitivity-aware grounding, prompt and response auditing.
Identity & observability (depth required)
- Microsoft Entra ID — app registrations, service principals, conditional access, and how all of the above bind to Power Platform DLP and Purview policies.
- Azure Monitor and Log Analytics — workspace design, diagnostic settings on Power Platform and Dataverse, KQL fluency, workbook authoring, alert rules, and action groups.
- Application Insights for component-level telemetry on custom connectors, plug-ins, and Copilot Studio agents.
- Power BI dashboards that report a value metric a non-technical executive can act on.
Consulting craft (depth required)
- Demonstrated ability to author and present architecture artifacts to a CTO-level audience: C4 diagrams, SADs, SDDs, milestone roadmaps.
- A discovery toolkit you actually use — Lean UX, BPMN, Event Storming, or comparable methods for translating ambiguous client problems into a prioritized backlog with measurable outcomes.
Strongly Preferred
- Microsoft certifications: PL-600 (Power Platform Solution Architect), PL-400 (Developer), SC-400 (Information Protection & Compliance Administrator), SC-300 (Identity & Access Administrator).
- Experience integrating Power Platform with Microsoft Fabric, Dataverse long-term retention, or Azure SQL.
- Microsoft Sentinel integration for governance signals and audit-log SIEM tier.
- Familiarity with Bicep + Azure Developer CLI (azd) for any Azure-side resources adjacent to the Power Platform estate.
- Prior delivery in regulated environments (medical device, life sciences, healthcare, or financial services) and comfort with the documentation discipline that comes with them.
- Experience as a subcontractor or partner-of-partner — you know how to represent PTM cleanly inside multi-vendor delivery teams and inside the end client’s governance forums.
How you work
- Search before assumptions. You verify against current docs, the client tenant, and runtime evidence before recommending. Confidence without evidence is not a substitute for either.
- Contracts before code. You define the interface — security roles, environment policies, label taxonomy, ALM gates — before anyone builds against it.
- Validators before delivery. Every governance control ships with a test that proves it works and an alert that fires when it stops working.
- Maker-Checker over solo heroics. You welcome a second pair of eyes on every material design decision, and you give the same in return.
- Plain and clear language. A 12-year-old can follow your milestone narrative. A CTO trusts your architecture. A business owner sees the ROI line.
Engagement details
- Engagement structure. Contract-to-hire. Initial term covers the full 90-day engagement (30 days Discovery + 60 days Implementation). Conversion to PTM Fusion full-time hire on successful delivery and mutual fit.
- Capacity. This posting is for one full-time-equivalent role. PTM may staff a second practitioner alongside you depending on scope confirmed at the close of Discovery; we are open to candidates interested in either the lead or the partnered configuration.
- Location. Remote, US-based.
- Compensation. Competitive contract rate during the engagement; market-aligned base, performance bonus, and benefits package on conversion. Final terms commensurate with experience and certifications.
- Start. Immediate. Discovery kicks off as soon as the right candidate is in seat.
Benefits
Possibility of contract-to-hire
