Microsoft 365 Engineer

• Design and implement SharePoint Online information architecture: sites, hubs, permissions, sharing, content types, and governance that people can actually follow.
• Contribute to M365 cyber-resilience: secure configuration, privileged access, backup and restore, ransomware readiness, and recovery runbooks.
• Configure and operate Microsoft Entra ID in support of that work: Conditional Access, MFA, PIM, guest/external access, and application consent.
• Administer Intune at Confirmed level: compliance policies, configuration profiles, and device signals used by Conditional Access.
• Implement information protection with Microsoft Purview: sensitivity labels, DLP, retention. At least to Junior/Confirmed depth, working with security.
• Use PowerShell to inventory, harden, and automate recurring administration. No undocumented click-ops on production.
• Support incident response on M365 workloads (compromised account, widespread sharing leak, restore of a site or mailbox).
• Document as-is / to-be, standards, and handover so the internal team can operate what you build.
• Work with security, infrastructure and business owners on collaboration risk (external sharing, guests, oversharing, shadow IT)., * Microsoft 365 backup / restore tooling (native + third party) and tested restore drills.
• Defender for Office 365, Defender for Cloud Apps, or Sentinel integrations.
• Power Platform (Power Automate, Power Apps) at Junior level, especially around SharePoint.
• Certifications: MS-102, SC-300, SC-400, MS-500 or equivalent practice.

At Keystone Solutions, we offer a dynamic consultancy environment where you will tackle diverse challenges across various client projects. Our commitment to turbo-charged learning ensures that you will have broad professional development opportunities, and we are dedicated to supporting your career growth. Being a

If you are ready to tackle technical and strategic challenges in a dynamic consultancy environment, apply today at Keystone Solutions Career Portal.

• 4+ years on Microsoft 365, with hands-on SharePoint Online (not only SharePoint 2013/2016 on-prem, and not only Teams end-user support).
• Comfortable across the ecosystem: Entra ID, Exchange Online, Teams, OneDrive and SharePoint, and how they share identity, data and risk.
• Practical security mindset: least privilege, external sharing, guest access, data leakage, privileged roles.
• Confirmed on Intune: compliance, configuration profiles, and how they feed Conditional Access. Not only licence assignment.
• Confirmed PowerShell for M365 / SharePoint / Entra / Intune.
• At least one cyber-resilience, tenant-hardening, backup/restore, information-protection or incident-recovery programme.
• English for documentation and stakeholders. French and/or Dutch is a plus.
• French speaking mandatory, Dutch is a plus., * Intune - Level: Advanced - Most recent: 1 to 3 years ago
• Microsoft 365 - Level: Advanced - Most recent: This year
• Microsoft Entra ID - Level: Advanced - Most recent: This year
• Microsoft Purview - Level: Intermediate - Most recent: 1 to 3 years ago
• PowerShell - Level: Advanced - Most recent: This year
• Sharepoint OnLine - Level: Advanced - Most recent: 1 to 3 years ago

Language requirements:

Dutch or French Level Native or bilingual proficiency English Level Professional working proficiency