Microsoft 365 Workplace Engineer (Employed or freelance)

EngiFlex BV; Brussel Hoofdstad; Hybrid; EUR 70,000 - 95,000; Full time

Benefits offered by this job

Company car

Career development budget for training

Education budget and career plan

Job summary

EngiFlex BV seeks an experienced Microsoft 365 Engineer to help modernise the digital workplace with emphasis on governance, hardening and recovery after incidents. The role focuses on SharePoint Online, Entra ID, Intune and Purview, driving secure, resilient collaboration across the Microsoft 365 ecosystem.

You will design information architecture, implement governance, automate with PowerShell, and support incident recovery while coordinating with security and business stakeholders.

Qualifications

• 4+ years hands-on Microsoft 365 experience with SharePoint Online
• Strong knowledge of Entra ID, Exchange Online, Teams, OneDrive, and SharePoint
• Security-minded with focus on least privilege and external sharing
• Experience with PowerShell in M365, Entra ID and Intune environments
• Contributions to cyber-resilience, tenant hardening, backup/restore or incident recovery

Responsibilities

• Design and implement information architecture in SharePoint Online: sites, hubs, permissions, sharing, content types, governance
• Contribute to cyber-resilience across Microsoft 365: secure configuration, backup/restore, ransomware readiness
• Configure and operate Microsoft Entra ID, Conditional Access, MFA, PIM, guest/external access
• Administer Intune: compliance policies, configuration profiles, device signals for CA
• Implement information protection with Microsoft Purview: sensitivity labels, DLP, retention
• Use PowerShell to inventory, automate admin tasks, improve hardening
• Support incident response for Microsoft 365 workloads
• Document current/target states, standards and handover material
• Collaborate with security, infra and business stakeholders on collaboration risks

Skills

SharePoint Online

Microsoft Entra ID

Intune

PowerShell

Microsoft 365

Education

Microsoft 365 certifications (MS-102, SC-300, SC-400, MS-500)

Equivalent practical experience

Tools

Power Automate

Power Apps

Job description

Mission

To support the modernisation of the digital workplace, we are looking for an experienced Microsoft 365 Engineer with strong expertise in SharePoint Online. In this role, you help strengthen collaboration, productivity and the security of the Microsoft 365 environment.

This position goes beyond L1/L2 tenant administration. The focus is on hardening, governing and recovering collaboration workloads so the organisation can continue operating after an identity incident, a ransomware event or a major misconfiguration.

• Design and implement the information architecture in SharePoint Online: sites, hubs, permissions, sharing model, content types and governance.
• Contribute to cyber-resilience across Microsoft 365: secure configuration, privileged access, backup and restore, ransomware readiness and recovery runbooks.
• Configure and operate Microsoft Entra ID, including Conditional Access, MFA, PIM, guest and external access, and application consent.
• Administer Intune at a confirmed level, with responsibility for compliance policies, configuration profiles and device signals used by Conditional Access.
• Implement information protection with Microsoft Purview, including sensitivity labels, DLP and retention, in coordination with security stakeholders.
• Use PowerShell to inventory the environment, automate recurring administration and improve hardening in a controlled way.
• Support incident response on Microsoft 365 workloads, for example in cases involving compromised accounts, excessive sharing or restore activities for sites and mailboxes.
• Document the current and target situation, standards and handover material so the internal team can operate the delivered solutions.
• Work closely with security, infrastructure and business stakeholders on collaboration-related risks such as external sharing, guest access, oversharing and shadow IT.

Assets

• Experience with Microsoft 365 backup and restore tooling, both native and third-party, including tested restore procedures.
• Knowledge of Defender for Office 365, Defender for Cloud Apps or Sentinel integrations.
• Exposure to Power Platform, especially Power Automate and Power Apps in combination with SharePoint Online.
• Certifications such as MS-102, SC-300, SC-400, MS-500, or equivalent practical experience.

Your profile

• You have at least 4 years of hands-on experience in Microsoft 365, with solid expertise in SharePoint Online.
• You have strong knowledge of the broader Microsoft 365 ecosystem, including Entra ID, Exchange Online, Teams, OneDrive and SharePoint, and you understand how identity, data and risk interact across these services.
• You bring a practical security mindset, with attention to least privilege, external sharing, guest access, data leakage and privileged roles.
• You are comfortable working with Intune for compliance policies, configuration profiles and Conditional Access-related device posture.
• You have confirmed experience with PowerShell in Microsoft 365, SharePoint, Entra ID and Intune environments.
• You have contributed to at least one programme related to cyber-resilience, tenant hardening, backup and restore, information protection or incident recovery.
• French is mandatory. Dutch is a plus. English is required for documentation and stakeholder communication.
• Experience at senior system engineer level is relevant for this role.
• The following skills are essential: Microsoft 365, SharePoint Online, Microsoft Entra ID, Intune and PowerShell.
• Knowledge of Microsoft Purview is an asset.

Offer

You will be part of a growing Belgian SME where initiative and personal development are encouraged. We will provide you with an enjoyable work environment with fun colleagues. We will work out a career plan with you, with attention and a budget for extra education/certification. You can count on an attractive salary, supplemented with extra-legal benefits, including a company car.
(Freelance is also possible)