Microsoft 365 Engineer

Keystone Solutions; Brussel Hoofdstad; On-site; EUR 65,000 - 90,000; Full time

Job summary

Keystone Solutions is seeking an experienced Microsoft 365 Engineer to work on-site with a client, driving the development, administration and continuous improvement of the M365 environment.

You will design information architecture, enforce security, manage Entra ID and Intune, and automate with PowerShell, while documenting progress and collaborating with security and IT teams.

Qualifications

• 4+ years on Microsoft 365 with hands-on SharePoint Online
• Broad experience across Entra ID, Exchange Online, Teams, OneDrive and SharePoint
• Security-minded: least privilege, external sharing, guest access, data leakage, privileged roles
• Intune: compliance, configuration profiles, feed Conditional Access
• PowerShell for M365/SharePoint/Entra/Intune
• At least one cyber-resilience, tenant-hardening, backup/restore, information-protection or incident-recovery programme
• English for documentation; French and/or Dutch is a plus
• French speaking mandatory, Dutch is a plus

Responsibilities

• Design and implement SharePoint Online information architecture: sites, hubs, permissions, sharing, content types, governance
• Contribute to M365 cyber-resilience: secure configuration, privileged access, backup and restore, ransomware readiness, and recovery runbooks
• Configure and operate Microsoft Entra ID: Conditional Access, MFA, PIM, guest/external access, application consent
• Administer Intune: compliance policies, configuration profiles, and device signals used by CA
• Implement information protection with Microsoft Purview: sensitivity labels, DLP, retention
• Use PowerShell to inventory, harden, and automate recurring administration
• Support incident response on M365 workloads (compromised account, sharing leak, restore site/mailbox)
• Document as-is/to-be, standards, and handover so the internal team can operate what you build
• Work with security, infrastructure and business owners on collaboration risk

Skills

Intune

Microsoft 365

Microsoft Entra ID

Microsoft Purview

PowerShell

SharePoint Online

Tools

Power Platform

Defender/Sentinel

Job description

Mission Overview:

As part of our consultancy mission, we are seeking an experienced Microsoft 365 Engineer to work on-site at a client location, representing Keystone Solutions. This role focuses on enhancing digital capabilities and supporting the development, administration, and continuous improvement of the Microsoft 365 environment.

Key Responsibilities:

• Design and implement SharePoint Online information architecture: sites, hubs, permissions, sharing, content types, and governance that people can actually follow.
• Contribute to M365 cyber-resilience: secure configuration, privileged access, backup and restore, ransomware readiness, and recovery runbooks.
• Configure and operate Microsoft Entra ID in support of that work: Conditional Access, MFA, PIM, guest/external access, and application consent.
• Administer Intune at Confirmed level: compliance policies, configuration profiles, and device signals used by Conditional Access.
• Implement information protection with Microsoft Purview: sensitivity labels, DLP, retention. At least to Junior/Confirmed depth, working with security.
• Use PowerShell to inventory, harden, and automate recurring administration. No undocumented click-ops on production.
• Support incident response on M365 workloads (compromised account, widespread sharing leak, restore of a site or mailbox).
• Document as-is / to-be, standards, and handover so the internal team can operate what you build.
• Work with security, infrastructure and business owners on collaboration risk (external sharing, guests, oversharing, shadow IT).

Profile Requirements:

• 4+ years on Microsoft 365, with hands-on SharePoint Online (not only SharePoint 2013/2016 on-prem, and not only Teams end-user support).
• Comfortable across the ecosystem: Entra ID, Exchange Online, Teams, OneDrive and SharePoint, and how they share identity, data and risk.
• Practical security mindset: least privilege, external sharing, guest access, data leakage, privileged roles.
• Confirmed on Intune: compliance, configuration profiles, and how they feed Conditional Access. Not only licence assignment.
• Confirmed PowerShell for M365 / SharePoint / Entra / Intune.
• At least one cyber-resilience, tenant-hardening, backup/restore, information-protection or incident-recovery programme.
• English for documentation and stakeholders. French and/or Dutch is a plus.
• French speaking mandatory, Dutch is a plus.

Assets:

• Microsoft 365 backup / restore tooling (native + third party) and tested restore drills.
• Defender for Office 365, Defender for Cloud Apps, or Sentinel integrations.
• Power Platform (Power Automate, Power Apps) at Junior level, especially around SharePoint.
• Certifications: MS-102, SC-300, SC-400, MS-500 or equivalent practice.

At Keystone Solutions, we offer a dynamic consultancy environment where you will tackle diverse challenges across various client projects. Our commitment to turbo-charged learning ensures that you will have broad professional development opportunities, and we are dedicated to supporting your career growth. Being a

Duration:

03/11/2026 - 03/11/2027 12 months (full time)

Skills required:

• Intune - Level: Advanced - Most recent: 1 to 3 years ago
• Microsoft 365 - Level: Advanced - Most recent: This year
• Microsoft Entra ID - Level: Advanced - Most recent: This year
• Microsoft Purview - Level: Intermediate - Most recent: 1 to 3 years ago
• PowerShell - Level: Advanced - Most recent: This year
• Sharepoint OnLine - Level: Advanced - Most recent: 1 to 3 years ago

Language requirements:

Dutch or French
Level Native or bilingual proficiency
English
Level Professional working proficiency