Microsoft 365 and AI Governance Solution Architect

Microsoft 365 and AI Governance Solution Architect  About Reply:

Reply specialises in designing and implementing solutions based on new communication channels and digital media. Structured as a network of highly specialised companies, Reply supports leading European industrial groups in sectors such as Telco & Media, Industry and Services, Banking and Insurance, and Public Administration, helping define and develop business models enabled by new paradigms such as AI, Cloud Computing, Digital Media, and the Internet of Things.

Reply’s services include Consulting, System Integration, and Digital Services.

Role Overview :
This role is for a Senior Architect who owns Microsoft 365 and Power Platform architecture for regulated clients, from discovery through to design authority and board-level assurance. You will define how Microsoft AI capability (Copilot, Copilot Studio, Agent 365, Microsoft Foundry) is governed, licensed, monitored and controlled in environments that answer to a regulator or a certification body. You will work directly with client CISOs, heads of architecture and risk functions, carrying the architectural argument yourself rather than relying on a delivery lead to make it for you.

Engagement Profile You will step into live engagements that are already in flight, and you will be just as comfortable starting from a blank canvas, setting up practices, standards and reusable patterns from scratch where none yet exist. The following engagement types recur, and the capability demanded differs in each: AI and Agent Governance What you do: build the governance framework and maturity model for Copilot Studio and Agent 365, produce architectural impact assessments, and deliver adoption and assurance reporting.

What it demands: control mapping to CIS Controls v8.1, NIST CSF 2.0, ISO/IEC 42001:2023 and the EU AI Act, translated into Microsoft controls that actually configure. M365 Workstream Inside an AI Platform Programme What you do: own Entra, Purview, Power Platform and Defender governance scope alongside an Azure architect, to deliverable and review-board dates. What it demands: holding the M365 position credibly next to other disciplines, and advising on an E3 to E5 move where no E5 or agent capability is designed yet.

Secure Tenant Build to Certification What you do: design the tenant against an external scheme, cloud-only, with Intune and Autopilot and access gated on device compliance, and with multiple companies migrating in. What it demands: working to certification schemes with fixed deadlines (Defence Cyber Certification, Cyber Essentials Plus) and designing for a client with no internal capability to run it.

You will also help build out the practice’s own internal assets, which are still being established. These cover areas such as Statement of Work automation, reusable bid intelligence tooling, enterprise AI deployment patterns, and Entra consolidation and licensing exposure modelling.

Responsibilities:

Architecture & Design Authority Own M365, Entra and Power Platform target architectures for regulated clients, including tenant design, identity, device and data boundaries Produce high-level designs, architecture decision records and architectural impact assessments that survive a client architecture review board Act as design authority over delivery engineers, reviewing and approving their work rather than only producing documents AI & Agent Governance Define governance for Copilot, Copilot Studio, Agent 365 and Microsoft Foundry: environment strategy, agent lifecycle, data loss prevention, model and connector controls, and logging routes through Sentinel or Purview Map controls to recognised frameworks (NIST CSF 2.0, ISO/IEC 42001, CIS Controls, EU AI Act) and to…