Power Platform Administrator Lead

Scope of Work:

Technical Leadership and Architecture
• Act as IMU’s technical lead across the digital portfolio and maintain an up-to-date view of solution architecture, environments, integrations, dependencies, risks and technical debt.
• Lead or contribute to solution design, architecture reviews, technical decision-making and implementation planning across applications and the Data Platform.
• Ensure coherence between individual solutions and the wider architecture, including Microsoft Power Platform, Dataverse, Microsoft Fabric, Azure, DSS CORE—including its DotNetNuke and Azure SQL components—APIs and reporting services.
• Provide technical guidance to developers, data engineers, contractors and implementation partners; convene technical meetings and escalate material risks, delays or decisions.
• Assess operational impact of proposed changes and ensure non-production validation before production release.

/ Personnel Lists Technical Ownership
• Lead technical readiness and deployment of PSP/Personnel Lists across countries and entities, including environment readiness, configuration, access, integration and troubleshooting.
• Coordinate ERP/HCM integrations with other entities and technical counterparts, including secure API-based data exchange, authentication, testing, error resolution and operational handover.
• Maintain and support Dataverse data structures, application access-rights management, role mappings, security-title logic, Power Apps and Power Pages components supporting PSP/Personnel Lists.
• Oversee synchronization of reference and access data from DSS CORE and other authoritative sources, including scheduled or event-driven flows and remediation where virtual-table triggers are unsuitable.
• Support deployment-related data validation, reconciliation and issue resolution while ensuring that recurring manual data-cleaning work is appropriately assigned and documented.

Microsoft Fabric and Data Platform Administration
• Administer and govern Fabric capacities, workspaces and access across development, test/UAT and production environments, applying least-privilege principles and separation of duties.
• Oversee the Data Platform’s ingestion and medallion architecture, including bronze, silver and gold layers, lakehouse/warehouse assets, semantic models and reporting, in coordination with the Data Engineer responsible for hands-on data engineering.
• Administer and troubleshoot Fabric platform connections, gateways, service principals, schedules, refreshes and monitoring; oversee and provide technical backup for pipeline development, maintenance and troubleshooting undertaken primarily by the Data Engineer.
• Coordinate integration of Dataverse, CORE/SQL, APIs, ERP/HCM systems and other Azure-hosted services into the Data Platform.
• Monitor Fabric capacity, platform performance, failures and data freshness; coordinate with the Data Engineer on data quality, pipeline exceptions and recovery, and with other departments, vendors and source-system owners on incident resolution.
• Support version control and controlled deployment practices, including Azure DevOps and Fabric Git integration where approved and available.

Power Platform and Application Administration
• Administer Power Platform environments, applications, solutions, connections, security groups, web roles, licensing and access requests.
• Design, develop, maintain and troubleshoot Power Apps, Power Automate, Power Pages, Dataverse and Power BI solutions.
• Manage application lifecycle activities, including solution packaging, environment-specific configuration, testing, deployment, rollback planning, upgrades and post-release validation.
• Coordinate certificates, portal/site activation, authentication configuration, service requests and product-support cases with OICT and Microsoft.
• Ensure administrative applications and sensitive functions use controlled, auditable access mechanisms rather than unmanaged individual sharing.

Security, Access and Technical Controls
• Apply ICT governance, cybersecurity, privacy and development requirements throughout design and operations.
• Maintain an inventory of privileged accounts, service principals, connections, credentials, security groups, workspace roles and integration endpoints used by IMU solutions.
• Implement and periodically review least-privilege access, production permissions, role-based security, secret handling and segregation between environments.
• Support technical investigation of security concerns through review of available audit and activity logs, unusual access patterns, data exports, endpoint exposure and integration configurations, in coordination with authorized OICT/security teams.
• Ensure that production access and changes are authorized, traceable and documented.

Operational Support, Monitoring and Service Management
• Provide second-line/technical support for production applications and platform services, including triage, root-cause analysis, corrective action and coordination of service requests.
• Maintain operational runbooks, dependency maps, support contacts, known-error records and escalation paths for critical services.
• Support continuity planning, backup arrangements and recovery of failed pipelines, integrations, portals and application services.
• Maintain visibility of open incidents, technical risks, expiring environments/certificates, capacity constraints and decisions requiring management attention.

Documentation, Knowledge Transfer and Handover
• Maintain current architecture diagrams, environment inventories, data-flow documentation, source-to-target mappings, role matrices, deployment instructions, runbooks and administrative guides.
• Complete a documented handover at the end of the contract and at other transition points identified by IMU, including current architecture and configuration records, open work and risks, administrative and support procedures, credential and access-transfer actions, repository locations, vendor and support contacts, and structured knowledge-transfer sessions with designated personnel.
• Store all source code, scripts, configuration artefacts, technical documentation and deployment materials created or maintained under the assignment in repositories and collaboration spaces designated and controlled by the client; ensure that institutional accounts retain administrative ownership and that no operational dependency remains on personal accounts or privately controlled repositories.
• Ensure that all work products and intellectual property produced specifically under the assignment are documented and transferred to the client in accordance with the applicable contract, the organization's rules and any pre-existing third-party licence terms; identify pre-existing or third-party components and their licensing conditions before use.
• Ensure named backup personnel have the required access and can independently perform critical operational procedures.

Technical Coordination
• Coordinate with IMU and client teams at headquarters and in the field, source-system owners and external implementation partners.
• Provide technical inputs to project plans, capacity planning, procurement/contract requirements, deployment readiness, governance reviews and management reporting.
• Support technical discussions with Microsoft and other vendors where product or platform escalation is required.

Deliverables:
• Operational platform services: Reliable technical operation, administration, maintenance and continuous improvement of assigned IMU applications, Microsoft Power Platform environments, the client's Data Platform and associated integrations.
• Technical architecture and standards: Maintained and approved architecture pack and technical standards covering applications, data, integrations, environments, access, deployment patterns and dependencies, reviewed after material changes and at least annually, together with technical recommendations for architecture evolution and modernization.
• Monthly technical status, health and risk report: One consolidated monthly report covering platform and application health, capacity, access, connections, integrations, scheduled processes, data freshness, significant incidents, releases and changes, failures, performance, licensing dependencies, technical risks, outstanding decisions, technical-debt priorities and planned work.
• Integration and data services: Reliable technical oversight, administration and troubleshooting of APIs, interfaces and data pipelines connecting IMU solutions with authoritative and enterprise data sources, in coordination with the Data Engineer responsible for hands-on pipeline development, transformations and data quality processes.
• Technical lifecycle management: Technical assessment, design, testing, deployment and post-release validation of enhancements and new technical components, supported by a maintained backlog of defects, technical debt, security remediation and platform improvements.
• Security and access controls: Maintained technical access and privileged-account inventory, reviewed and updated at least quarterly; periodic review of administrative access, service principals, credentials, environment permissions and other relevant technical controls; and timely implementation of agreed remediation measures.
• Documentation, repository stewardship and institutional capability: Current technical documentation, architecture diagrams, configuration and deployment instructions, operational runbooks, troubleshooting materials, source code and scripts maintained in client-designated repositories, together with regular cross-training and knowledge-sharing to reduce dependency on individual personnel or vendors.
• Handover package: At contract completion or another IMU-directed transition point, a complete and validated handover package comprising current documentation, repository and asset locations, access-transfer records, open issues and risks, support contacts, pending actions and completed knowledge-transfer sessions, accepted by the designated IMU supervisor.
• Technical advisory and continuous improvement: Periodic recommendations to IMU management on architecture, platform modernization, interoperability, automation, performance, resilience, maintainability and technology-related opportunities or risks.
• Technical support to priority initiatives: Primary technical leadership and hands-on application support for PSP/Personnel Lists, SSIRS 2.0 and UNSMIN 2.0, together with Microsoft Fabric platform administration and integration oversight in coordination with the Data Engineer; assignments adjusted according to IMU priorities and available resources.