Microsoft 365 Engineer

Mission Overview

As part of our consultancy mission, we are seeking an experienced Microsoft 365 Engineer to work on-site at a client location, representing Keystone Solutions. This role focuses on enhancing digital capabilities and supporting the development, administration, and continuous improvement of the Microsoft 365 environment.

Key Responsibilities

• Design and implement SharePoint Online information architecture: sites, hubs, permissions, sharing, content types, and governance that people can actually follow.
• Contribute to M365 cyber-resilience: secure configuration, privileged access, backup and restore, ransomware readiness, and recovery runbooks.
• Configure and operate Microsoft Entra ID in support of that work: Conditional Access, MFA, PIM, guest/external access, and application consent.
• Administer Intune at Confirmed level: compliance policies, configuration profiles, and device signals used by Conditional Access.
• Implement information protection with Microsoft Purview: sensitivity labels, DLP, retention. At least to Junior/Confirmed depth, working with security.
• Use PowerShell to inventory, harden, and automate recurring administration. No undocumented click-ops on production.
• Support incident response on M365 workloads (compromised account, widespread sharing leak, restore of a site or mailbox).
• Document as-is / to-be, standards, and handover so the internal team can operate what you build.
• Work with security, infrastructure and business owners on collaboration risk (external sharing, guests, oversharing, shadow IT).

Profile Requirements

• 4+ years on Microsoft 365, with hands-on SharePoint Online (not only SharePoint 2013/2016 on-prem, and not only Teams end-user support).
• Comfortable across the ecosystem: Entra ID, Exchange Online, Teams, OneDrive and SharePoint, and how they share identity, data and risk.
• Practical security mindset: least privilege, external sharing, guest access, data leakage, privileged roles.
• Confirmed on Intune: compliance, configuration profiles, and how they feed Conditional Access. Not only licence assignment.
• Confirmed PowerShell for M365 / SharePoint / Entra / Intune.
• At least one cyber-resilience, tenant-hardening, backup/restore, information-protection or incident-recovery programme.
• English for documentation and stakeholders. French and/or Dutch is a plus.
• French speaking mandatory, Dutch is a plus.

Assets

• Microsoft 365 backup / restore tooling (native + third party) and tested restore drills.
• Defender for Office 365, Defender for Cloud Apps, or Sentinel integrations.
• Power Platform (Power Automate, Power Apps) at Junior level, especially around SharePoint.
• Certifications: MS-102, SC-300, SC-400, MS-500 or equivalent practice.

At Keystone Solutions, we offer a dynamic consultancy environment where you will tackle diverse challenges across various client projects. Our commitment to turbo-charged learning ensures that you will have broad professional development opportunities, and we are dedicated to supporting your career growth. Being a

Duration: 03/11/2026 - 03/11/2027 12 months • (full time)

Skills required

• IntuneAdvanced · last used 1 to 3 years ago
• Microsoft 365Advanced · used this year
• Microsoft Entra IDAdvanced · used this year
• Microsoft PurviewIntermediate · last used 1 to 3 years ago
• PowerShellAdvanced · used this year
• Sharepoint OnLineAdvanced · last used 1 to 3 years ago

Language requirements

• Dutch / FrenchNative or bilingual proficiency
• EnglishProfessional working proficiency