AI & Digital Workplace Engineer

Position Summary

The AI and Digital Workplace Engineer is the senior technical owner of WME's AI-enabled productivity and collaboration experience - and the deep hands-on engineer behind the identity, endpoint, and Microsoft 365 platform that experience runs on. The role selects, deploys, integrates, and continuously improves the AI tools and capabilities embedded in the digital workplace, while engineering and operating the underlying Entra ID, endpoint, and M365 services to an operational-excellence standard. It is the senior technical voice on AI tooling for the IT organization and the broader business, and the engineering lead for IT's own use of AI to automate, augment, and improve service delivery. Read the role as two layers. The foundation is senior digital workplace engineering: identity (Entra ID, conditional access, SSO/SAML/OIDC, hybrid identity, PIM, B2B), endpoint management (Intune and Jamf), M365 service engineering (Exchange Online, Teams, SharePoint, OneDrive), and the ITIL/ITSM discipline that keeps those services reliable. The differentiating scope is AI: the engineer is accountable for ensuring AI tools are well-chosen, well-integrated, well-governed, and well-adopted. A credible candidate is strong on the foundation and demonstrably advanced on the AI scope. This role is the operational expression of an AI-first IT culture built on a reliable digital workplace. It partners with the cybersecurity governance function on AI risk and policy, with the workforce AI adoption and enablement program on AI literacy and adoption, and with end users across the business on AI experience and capability.

Scope & Boundaries

This role's scope is fenced explicitly to prevent overlap with adjacent roles operating on the same problem space:

In scope (foundation): engineering and operation of the digital workplace platform - Entra ID and identity lifecycle, conditional access, endpoint management (Intune and Jamf), and M365 service engineering and troubleshooting (Exchange Online, Teams, SharePoint, OneDrive); incident, problem, and change management for the digital workplace; ITSM platform administration; and continual service improvement.

In scope (AI): engineering of AI capabilities in the digital workplace stack; technical implementation of AI Acceptable Use policy controls; technical AI tool inventory and shadow-AI detection; AI-driven automation for IT itself; reference patterns, prompt libraries, and Architectural Decision Records for AI engineering; technical coaching and the engineering community of practice for AI.

Coordinated with the workforce AI adoption and enablement program: this role is the technical builder - it designs and integrates the AI tools; the adoption program owns workforce AI literacy, change management, and business-facing adoption. The two coordinate on major AI rollouts, with technical decisions resting with this role.

Coordinated with the cybersecurity governance and IT compliance functions: this role implements technical controls that operationalize AI risk policy and produces the technical AI tool inventory that underpins audit evidence. The governance function owns AI policy and broader audit posture; the compliance function owns evidence integrity. Engineering technical decisions that touch AI risk are made in consultation with the governance function.

Coordinated with infrastructure, regional, and service-desk peers: this role sets digital workplace and AI engineering patterns; regional engineers and the service desk apply them. Server, network, and telecom infrastructure remain with the infrastructure and enterprise services function. Where boundaries blur on application deployment or endpoint features, senior IT leadership adjudicates.

Out of scope: workforce-facing AI literacy curriculum design and delivery (owned by the workforce AI adoption and enablement program); model fine-tuning and bespoke ML model development (this role evaluates and integrates rather than trains); broader cybersecurity policy authorship (the cybersecurity governance / GRC function); audit evidence integrity ownership (the IT compliance function); server, network, and telecom infrastructure engineering; HR-side competency frameworks and corporate L&D.

Key Responsibilities

1. Digital Workplace Platform Engineering - Identity, Endpoint & M365Engineer and operate Microsoft Entra ID: conditional access, group and identity governance, SSO / SAML / OIDC integrations, hybrid identity (Entra Connect), Privileged Identity Management (PIM), and B2B / guest access governance.Own identity lifecycle automation (Joiner / Mover / Leaver) and access governance across the global workforce.Own…