Microsoft 365 Solution Architect
Top Benefits
About the role
ABOUT GOWLING WLG
At Gowling WLG, our dedication to excellence and quality service begins with our people. As a global law firm with offices across Canada, the U.K., Europe, the Middle East and Asia, we pride ourselves on sourcing and retaining top talent who bring energy, passion and commitment to the delivery of outstanding client service.
Employee satisfaction is important to us. We work hard to ensure that our people are motivated, engaged and empowered. We are guided by our firm’s Core Values - Raise the Bar, Thrive Together, Embrace Differences.
Diversity, equity, and inclusion are an integral part of our firm’s core values. We are always striving to build a more equitable, engaging and rewarding workplace by attracting and retaining talented people from a diverse range of backgrounds, cultures and experiences. Our aim is to help everyone reach their full potential and achieve their personal and professional goals.
Our diverse group of legal professionals, law students, law clerks, paralegals, legal administrative assistants and business services team members work together, and are respected and valued for their individual contributions.
PROFILE
We are looking for a Microsoft 365 (M365) Solution Architect with hands-on and product-savvy experience across SharePoint, Teams, Exchange/Outlook, OneDrive, Entra ID, Intune, Purview/Compliance, Defender for Office 365, and Copilot for Microsoft 365. You will architect, design, and land modern workplace solutions, shaping information architecture, collaboration, security, and compliance at scale. You’ll own tenant-level architecture, information architecture, and adoption—turning business needs into secure, scalable M365 solutions.
This position can be based in any of our Canadian offices!
RESPONSIBILITIES
Architecture & Roadmap
- Own the M365 tenant architecture: collaboration, content services, identity, device, security, and compliance layers. Produce an M365 roadmap (licensing/E3- E5 value, Copilot readiness, Teams Phone/Rooms, Viva, SharePoint Premium/Syntex, Loop, Search).
- Define information architecture (site taxonomy, content types, metadata, records/retention) and search experiences.
Identity & Access (Entra ID)
- Design Zero Trust access: Conditional Access, MFA, device compliance, network/location controls, and PIM for privileged roles.
- Govern app registrations, consent, service principals, and B2B/B2C/external collaboration.
Collaboration & Content Services
- Architect SharePoint Online (hub/site design, provisioning patterns, PnP templates, search, records management).
- Design Teams topologies (org-wide/project teams, guest access, lifecycle/archival, information barriers) and integrate with line-of-business systems.
- Guide Exchange Online configurations (hybrid where needed, transport rules, anti-spam/anti-phish, mail routing).
- Lead content migrations (file shares/legacy DMS/Google/Box/Exchange) with governance and change management.
Security, Compliance & Risk
- Implement Purview policies: sensitivity labels, DLP, retention/records, eDiscovery (Standard/Premium), Audit (Standard/Premium), insider risk.
- Establish Defender for Office 365 protections (Safe Links/Attachments, anti-phish, attack simulation) and tune policies to reduce risk without breaking work.
- Partner with Security/Legal for regulatory needs (e.g., ISO 27001/SOC, privacy) and provide controls with artifacts and audit trails.
Device & App Management (Intune)
- Design MDM/MAM baselines, compliance policies, configuration profiles, Windows Autopilot, app protection for BYOD, and update rings.
- Integrate identity, device, and compliance signals into Conditional Access; standardize macOS/iOS/Android/Windows management.
Copilot for Microsoft 365 Readiness
- Define permissions (least privilege, group cleanup), label/DLP baselines, and Graph connectors where appropriate.
- Pilot Copilot scenarios, adoption plans, prompts/playbooks, and measurement (productivity/quality KPIs).
Governance, Operations & Adoption
- Define governance: site/team provisioning, naming, lifecycle, external sharing, role-based access, records policies, and chargeback/FinOps.
- Run change management: Message Center hygiene, feature flighting, comms/training, usage analytics, and service health runbooks.
- Create architecture docs, diagrams, SOPs/runbooks; mentor admins/engineers and guide partner/vendors.
QUALIFICATIONS
Required
- 5–8+ years architecting and operating Microsoft 365 at enterprise scale.
- Deep expertise in SharePoint Online, Teams, Exchange Online, OneDrive, and tenant-level patterns.
- Strong command of Entra ID (CA, MFA, PIM, app consent, B2B/external).
- Hands-on with Purview (labels/DLP/retention/eDiscovery) and Defender for Office 365 tuning.
- Practical Intune experience (MDM/MAM, compliance, Autopilot, app deployment).
- Proven delivery of migrations (content/mail) and secure external collaboration.
- Proficiency with PowerShell (PnP, Graph/Entra, Exchange, SharePoint, Teams) and admin centers.
- Excellent stakeholder management, documentation, and adoption/change management skills.
Preferred
- Experience with Azure services (Logic Apps, Functions, Service Bus, etc) for advanced integration.
- Relevant Microsoft certifications
Gowling WLG employees benefit from a hybrid work environment.
The starting range for this role is $110,000 to $140,000. Starting salary will be determined based on an applicant’s individual skills, competencies and unique qualifications. Gowling WLG employees have the potential to exceed this range based on tenure and performance.
Not sure if you meet all the requirements? If you are excited about this opportunity but your experience does not align perfectly with every qualification in the job description, we encourage you to apply anyway. You may be just the right candidate for this or other roles.
Gowling WLG is dedicated to building a diverse and inclusive workplace. If you have a disability or special need that requires accommodation at any time during the recruitment process, please let us know.
While we appreciate all applications received, only those candidates selected for an interview will be contacted.
About Gowling WLG
Microsoft 365 Solution Architect
Top Benefits
About the role
ABOUT GOWLING WLG
At Gowling WLG, our dedication to excellence and quality service begins with our people. As a global law firm with offices across Canada, the U.K., Europe, the Middle East and Asia, we pride ourselves on sourcing and retaining top talent who bring energy, passion and commitment to the delivery of outstanding client service.
Employee satisfaction is important to us. We work hard to ensure that our people are motivated, engaged and empowered. We are guided by our firm’s Core Values - Raise the Bar, Thrive Together, Embrace Differences.
Diversity, equity, and inclusion are an integral part of our firm’s core values. We are always striving to build a more equitable, engaging and rewarding workplace by attracting and retaining talented people from a diverse range of backgrounds, cultures and experiences. Our aim is to help everyone reach their full potential and achieve their personal and professional goals.
Our diverse group of legal professionals, law students, law clerks, paralegals, legal administrative assistants and business services team members work together, and are respected and valued for their individual contributions.
PROFILE
We are looking for a Microsoft 365 (M365) Solution Architect with hands-on and product-savvy experience across SharePoint, Teams, Exchange/Outlook, OneDrive, Entra ID, Intune, Purview/Compliance, Defender for Office 365, and Copilot for Microsoft 365. You will architect, design, and land modern workplace solutions, shaping information architecture, collaboration, security, and compliance at scale. You’ll own tenant-level architecture, information architecture, and adoption—turning business needs into secure, scalable M365 solutions.
This position can be based in any of our Canadian offices!
RESPONSIBILITIES
Architecture & Roadmap
- Own the M365 tenant architecture: collaboration, content services, identity, device, security, and compliance layers. Produce an M365 roadmap (licensing/E3- E5 value, Copilot readiness, Teams Phone/Rooms, Viva, SharePoint Premium/Syntex, Loop, Search).
- Define information architecture (site taxonomy, content types, metadata, records/retention) and search experiences.
Identity & Access (Entra ID)
- Design Zero Trust access: Conditional Access, MFA, device compliance, network/location controls, and PIM for privileged roles.
- Govern app registrations, consent, service principals, and B2B/B2C/external collaboration.
Collaboration & Content Services
- Architect SharePoint Online (hub/site design, provisioning patterns, PnP templates, search, records management).
- Design Teams topologies (org-wide/project teams, guest access, lifecycle/archival, information barriers) and integrate with line-of-business systems.
- Guide Exchange Online configurations (hybrid where needed, transport rules, anti-spam/anti-phish, mail routing).
- Lead content migrations (file shares/legacy DMS/Google/Box/Exchange) with governance and change management.
Security, Compliance & Risk
- Implement Purview policies: sensitivity labels, DLP, retention/records, eDiscovery (Standard/Premium), Audit (Standard/Premium), insider risk.
- Establish Defender for Office 365 protections (Safe Links/Attachments, anti-phish, attack simulation) and tune policies to reduce risk without breaking work.
- Partner with Security/Legal for regulatory needs (e.g., ISO 27001/SOC, privacy) and provide controls with artifacts and audit trails.
Device & App Management (Intune)
- Design MDM/MAM baselines, compliance policies, configuration profiles, Windows Autopilot, app protection for BYOD, and update rings.
- Integrate identity, device, and compliance signals into Conditional Access; standardize macOS/iOS/Android/Windows management.
Copilot for Microsoft 365 Readiness
- Define permissions (least privilege, group cleanup), label/DLP baselines, and Graph connectors where appropriate.
- Pilot Copilot scenarios, adoption plans, prompts/playbooks, and measurement (productivity/quality KPIs).
Governance, Operations & Adoption
- Define governance: site/team provisioning, naming, lifecycle, external sharing, role-based access, records policies, and chargeback/FinOps.
- Run change management: Message Center hygiene, feature flighting, comms/training, usage analytics, and service health runbooks.
- Create architecture docs, diagrams, SOPs/runbooks; mentor admins/engineers and guide partner/vendors.
QUALIFICATIONS
Required
- 5–8+ years architecting and operating Microsoft 365 at enterprise scale.
- Deep expertise in SharePoint Online, Teams, Exchange Online, OneDrive, and tenant-level patterns.
- Strong command of Entra ID (CA, MFA, PIM, app consent, B2B/external).
- Hands-on with Purview (labels/DLP/retention/eDiscovery) and Defender for Office 365 tuning.
- Practical Intune experience (MDM/MAM, compliance, Autopilot, app deployment).
- Proven delivery of migrations (content/mail) and secure external collaboration.
- Proficiency with PowerShell (PnP, Graph/Entra, Exchange, SharePoint, Teams) and admin centers.
- Excellent stakeholder management, documentation, and adoption/change management skills.
Preferred
- Experience with Azure services (Logic Apps, Functions, Service Bus, etc) for advanced integration.
- Relevant Microsoft certifications
Gowling WLG employees benefit from a hybrid work environment.
The starting range for this role is $110,000 to $140,000. Starting salary will be determined based on an applicant’s individual skills, competencies and unique qualifications. Gowling WLG employees have the potential to exceed this range based on tenure and performance.
Not sure if you meet all the requirements? If you are excited about this opportunity but your experience does not align perfectly with every qualification in the job description, we encourage you to apply anyway. You may be just the right candidate for this or other roles.
Gowling WLG is dedicated to building a diverse and inclusive workplace. If you have a disability or special need that requires accommodation at any time during the recruitment process, please let us know.
While we appreciate all applications received, only those candidates selected for an interview will be contacted.