Microsoft 365 Engineer

Context

• As part of its organisational and digital transformation strategy, the Client is strengthening its digital capabilities to support its teams and improve its internal operations.
• The Agency is modernising its digital workplace to enhance collaboration, productivity and the security of its working environment.
• In this context, Client is seeking an experienced Microsoft 365 Engineer with particularly strong expertise in SharePoint to support the development, administration and continuous improvement of its Microsoft 365 environment.

Mission

• We are looking for a Microsoft 365 Engineer who knows SharePoint Online and the M365 ecosystem at large, and who can contribute to cyber-resilience work. This is not L1/L2 tenant administration. You harden, govern and recover collaboration workloads (SharePoint, Teams, Exchange, OneDrive) so the organisation can still operate after an identity incident, a ransomware event, or a serious misconfiguration.
• Design and implement SharePoint Online information architecture: sites, hubs, permissions, sharing, content types, and governance that people can actually follow.

• Contribute to M365 cyber-resilience: secure configuration, privileged access, backup and restore, ransomware readiness, and recovery runbooks.
• Configure and operate Microsoft Entra ID in support of that work: Conditional Access, MFA, PIM, guest/external access, and application consent.
• Administer Intune at Confirmed level: compliance policies, configuration profiles, and device signals used by Conditional Access.
• Implement information protection with Microsoft Purview: sensitivity labels, DLP, retention. At least to Junior/Confirmed depth, working with security.
• Use PowerShell to inventory, harden, and automate recurring administration. No undocumented click-ops on production.
• Support incident response on M365 workloads (compromised account, widespread sharing leak, restore of a site or mailbox).
• Document as-is / to-be, standards, and handover so the internal team can operate what you build.
• Work with security, infrastructure and business owners on collaboration risk (external sharing, guests, oversharing, shadow IT).

Profile

• 4+ years on Microsoft 365, with hands-on SharePoint Online (not only SharePoint 2013/2016 on-prem, and not only Teams end-user support).
• Comfortable across the ecosystem: Entra ID, Exchange Online, Teams, OneDrive and SharePoint, and how they share identity, data and risk.
• Practical security mindset: least privilege, external sharing, guest access, data leakage, privileged roles.
• Confirmed on Intune: compliance, configuration profiles, and how they feed Conditional Access. Not only licence assignment.
• Confirmed PowerShell for M365 / SharePoint / Entra / Intune.
• At least one cyber-resilience, tenant-hardening, backup/restore, information-protection or incident-recovery programme.
• English for documentation and stakeholders. French and/or Dutch is a plus.
• French speaking mandatory, Dutch is a plus 

Assets

• Microsoft 365 backup / restore tooling (native + third party) and tested restore drills.
• Defender for Office 365, Defender for Cloud Apps, or Sentinel integrations.
• Power Platform (Power Automate, Power Apps) at Junior level, especially around SharePoint.
• Certifications: MS-102, SC-300, SC-400, MS-500 or equivalent practice.