ICT Architect

pWe are looking for an experienced ICT Architect (Expert) with strong SharePoint and Microsoft 365 expertise to support the development of a secure, sustainable and NIS2-compliant rights and access management framework within a Microsoft 365 environment. /ppThe architect will be responsible for developing the M365 architecture, defining the governance structure, establishing practical technical processes and providing standardised agreements and templates. The role requires strong architectural expertise combined with hands‑on knowledge of SharePoint, Microsoft 365, information management, security and enterprise content management. /ppThe successful candidate must be native-level Dutch-speaking, CEFR C2. /ph3Key Responsibilities /h3ulliDevelop the Microsoft 365 architecture and establish a sustainable rights and access management framework. /liliDesign the governance structure for Microsoft 365 rights management. /liliDefine standard agreements, procedures and templates. /liliEstablish the technical and practical follow‑up processes for rights and access management. /liliEnsure the architecture remains sustainable and can accommodate frequent Microsoft updates. /liliDevelop dashboarding and monitoring capabilities for ICT and Information Management. /liliEstablish a NIS2‑compliant division of responsibilities, including a functional administrator role for Information Management and a technical administrator role for the Service Desk. /li /ulh3SharePoint / Document Management System /h3ulliDesign the rights management framework for SharePoint in compliance with NIS2. /liliEstablish a clear distinction between confidential and non‑confidential document libraries based on the organisation's internal data classification. /liliDefine the role and responsibilities of the designated contact person for each SharePoint site. /liliEstablish responsibilities for rights management, library structure, page and navigation management, metadata and site configuration changes. /liliDevelop a procedure for granting access to the SharePoint DMS through the central ICT access management process. /liliDevelop a user framework that complies with NIS2 requirements. /liliEstablish a monitoring system for rights management and related procedures. /liliFully document the solution so that the internal Service Desk can maintain the SharePoint rights management system independently. /li /ulh3Document Sharing /h3ulliDesign a NIS2‑compliant solution for internal document sharing at document level. /liliDesign a NIS2‑compliant solution for sharing documents with external partners. /liliAccount for external partners who do not have a Microsoft 365 account. /liliProvide an alternative for transferring large volumes of documents, such as through WeTransfer. /liliEnsure the solution is developed within the existing Microsoft 365 licensing framework. /liliIf OneDrive is proposed, clearly distinguish between personal OneDrive usage and the document‑sharing environment and prevent unintended sharing of users' complete personal OneDrive environments. /liliDevelop user guidelines and monitoring procedures. /liliDocument the technical and organisational setup so the internal Service Desk can maintain the solution. /li /ulh3Microsoft Teams /h3ulliDesign a NIS2‑compliant rights and access management framework for Microsoft Teams collaboration with internal and external partners. /liliAccount for external partners without Microsoft 365 accounts. /liliDefine the responsibilities of the designated contact person for each Teams site, including rights management, private channels and the underlying SharePoint site. /liliEstablish a controlled procedure for granting access to Teams sites through the central ICT access management process. /liliDevelop NIS2‑compliant user guidelines. /liliDocument the technical and organisational setup to enable future internal management, evaluation and adaptation. /li /ulh3Security Access Management /h3pThe architecture must support the organisation's policy objectives, including: /pulliPreventing unauthorised access to information, applications, infrastructure and services. /liliEnsuring that every identity and assigned access can be clearly identified and justified. /liliApplying least‑privilege access based on the user's role or assignment. /liliPreventing accumulation of access rights following role changes. /liliTimely revocation of access when an assignment ends or access is no longer required. /liliApplying stricter protection to privileged and administrative access. /liliManaging and monitoring access by suppliers and external partners separately. /liliLogging and monitoring access changes, authentication and elevated privileges. /liliPeriodically reviewing whether access rights remain necessary and appropriate. /liliMaintaining an auditable trail for material access decisions. /liliFormally recording, risk‑assessing and time‑limiting exceptions. /liliMeasuring the effectiveness of the process and reporting perio