MS Copilot AI Engineer

Overview

You will serve as the technical and strategic lead for the deployment, governance, and optimization of Microsoft’s Copilot Chat, 365 Copilot, as well as other AI tools within a federal agency. This hybrid role combines enterprise architecture, AI governance, and hands-on engineering to deliver a secure, compliant, and mission-aligned AI platform. You’ll work across IT, cybersecurity, legal, and business units to ensure that Copilot and related AI services are fully integrated, operationally sound, and are driving measurable productivity gains across the agency.

Architecture & Strategy

• Lead the end-to-end design and rollout of Microsoft 365 Copilot and Azure AI Foundry across a secure government tenant
• Architect AI infrastructure including Microsoft Graph grounding, web grounding, plugin extensibility, and telemetry integration
• Evaluate and integrate third-party AI plugins and connectors in accordance with federal security standards
• Align AI platform capabilities with agency mission goals and bureau-specific needs

Governance & Compliance

• Develop and enforce AI governance policies, including responsible use, data boundaries, and risk mitigation
• Ensure compliance with federal frameworks such as FedRAMP, FISMA, NIST AI RMF, and agency-specific directives
• Collaborate with legal, cybersecurity, and privacy teams to manage ethical and regulatory considerations

Engineering & Operations

• Administer and optimize Copilot services, plugins, and Graph-based integrations
• Implement secure access controls, role-based permissions, and data protection mechanisms
• Monitor AI performance, usage telemetry, and system health across bureaus
• Troubleshoot and resolve technical issues related to AI services and integrations

Enablement & Adoption

• Drive Copilot adoption through training, prompt libraries, and tailored use cases
• Partner with business owners to identify AI opportunities and deliver measurable productivity improvements
• Maintain technical documentation, support channels, and user-facing resources
• Report on AI usage, adoption metrics, and ROI to leadership

• U.S. Citizen eligible for Public Trust clearance, existing clearance is preferred
• 10+ years of experience in enterprise architecture, cloud engineering, or AI platform deployment, Azure GCC and MSFT Fed Ramped solutions.
• Deep expertise in Microsoft 365, Azure AI, Microsoft Graph, associated APIs and Copilot extensibility
• Proven success in infrastructure governance, risk management, and operational support
• Expertise in Power Shell, Azure CLI or other tools used for scripting and automation.
• Strong communication skills across technical and executive audiences
• Experience in both government and commercial environments preferred

• Grounding & data access:Configure web grounding
  and Microsoft Graph grounding
  (Graph connectors, indexing scope, ACL mapping) to ensure least‑privilege access to SharePoint, One Drive, Teams, and line‑of‑business repositories. Additionally, there will likely be the need to support other Fed Ramped, AI solutions available in the marketplace, and the ability to understand and expand utilization of MSFT Copilot products as needed.
• Extensibility:Support Copilot Studio/Teams extensions as applicable; document integration patterns and guardrails.
• Security & monitoring:Enable auditing, logging, and alerting across Microsoft 365/Entra; integrate with Log Analytics and SIEM/SOAR.
• Data protection:Implement Microsoft Purview (Sensitivity Labels, DLP, eDiscovery), retention, and auditing aligned to government requirements.

• Draft and operationalize acceptable use
  , data classification/handling, human‑in‑the‑loop requirements, red‑teaming, incident response, and model safety boundaries.
• Align controls to Zero Trust
  principles and frameworks relevant to the environment (e.g., NIST 800‑53/171, FedRAMP baselines).
• Establish lifecycle governance for prompts, connectors, plugins, and data sources (change control, reviews, recertification).

• Design and secure API endpoints
  and app registrations (OAuth 2.0, Entra ) for…