Senior Consultant - Power Platform, Copilot Studio & Purview Gove

About the role

The role involves leading a 90-day engagement that transforms a Fortune-class regulated enterprise's unmanaged Power Platform, Copilot Studio, and M365 estate into a governed, classified, observable, ROI-tracked capability. Upon successful delivery, the engagement will convert the lead into a full-time hire at PTM Fusion.

Responsibilities

• Conduct discovery conversations with CIOs and run Event Storming sessions with finance directors.
• Deliver a risk-ranked inventory of every app, flow, agent, environment, sensitivity label, and DLP policy across the client tenant.
• Implement and operate a Power Platform CoE Kit with environment strategy, tenant- and environment-level DLP policies, and connector classification rationale.
• Operationalize Copilot Studio agent governance, including authentication, content moderation, and audit logging.
• Design and operationalize Azure Monitor and Log Analytics observability surfaces tied to the agreed value metric.
• Author and present architecture artifacts such as C4 diagrams, SADs, SDDs, and milestone roadmaps to a CTO-level audience.
• Ensure all governance controls are tested and validated before delivery.
• Work collaboratively with multi-vendor teams and the end client's governance forums.

Requirements

• 5+ years delivering on Microsoft Power Platform in enterprise or mid-market environments, with at least 2 full lifecycles of CoE Kit deployment and operation.
• Deep working knowledge of Power Platform ALM, including solution layering, managed solutions, environment strategy, Power Platform Pipelines or the ALM Accelerator, and integration with GitHub Actions or Azure DevOps.
• SailPoint - Proven expertise with Identity Governance & Administration (IGA) platforms, specifically SailPoint Hands-on experience implementing, configuring, and maintaining SailPoint solutions (e.g., IdentityIQ, IdentityNow).
• Experience with Dataverse, including security model, table and relationship design, plug-ins, business rules, and auditing.
• Expertise with Power Platform DLP policies, including connector classification, tenant- vs environment-level scoping, endpoint filtering for HTTP and SQL connectors, and custom connector handling.
• Standing up at least one production-grade agent end-to-end.
• Microsoft Purview & M365 governance - Microsoft Purview Information Protection, including sensitivity label taxonomy design, manual labeling, auto-labeling policies (client-side and service-side), and label-driven encryption. Also includes Microsoft Purview Data Loss Prevention across Exchange, SharePoint, OneDrive, Teams, and Endpoint DLP, including policy tuning, incident triage, and integration with Power Platform DLP.
• Data classification using built-in, custom, exact-data-match, and trainable classifiers. Also includes retention labels and retention policies, records management, and disposition review. Microsoft Purview Audit (Standard and Premium), audit log search and export, and integration with downstream SIEM. Microsoft Compliance Manager — assessment selection, improvement actions, and executive reporting. Purview for Copilot — DSPM for AI configuration, sensitivity-aware grounding, prompt and response auditing.
• Identity & observability - Microsoft Entra ID, including app registrations, service principals, conditional access, and how all of the above bind to Power Platform DLP and Purview policies. Azure Monitor and Log Analytics — workspace design, diagnostic settings on Power Platform and Dataverse, KQL fluency, workbook authoring, alert rules, and action groups. Application Insights for component-level telemetry on custom connectors, plug-ins, and Copilot Studio agents. Power BI dashboards that report a value metric a non-technical executive can act on.
• Consulting craft - Demonstrated ability to author and present architecture artifacts to a CTO-level audience. Strongly Preferred Microsoft certifications: PL-600 (Power Platform Solution Architect), PL-400 (Developer), SC-400 (Information Protection & Compliance Administrator), SC-300 (Identity & Access Administrator). Experience integrating Power Platform with Microsoft Fabric, Dataverse long-term retention, or Azure SQL. Microsoft Sentinel integration for governance signals and audit-log SIEM tier. Familiarity with Bicep + Azure Developer CLI (azd) for any Azure-side resources adjacent to the Power Platform estate. Prior delivery in regulated environments (medical device, life sciences, healthcare, or financial services) and comfort with the documentation discipline that comes with them.

Skills

• Proactive approach to governance as a value engine, not a brake.
• Ability to communicate in plain language to business owners and in precise technical terms to engineers.
• Strong problem-solving and collaboration skills.
• Experience with regulatory compliance and governance frameworks.
• Proficiency in Power Platform, Dataverse, and Microsoft Purview tools.
• Excellent written and verbal communication skills.
• Ability to work remotely and manage multiple projects simultaneously.

Benefits

• Possibility of contract-to-hire.