We are looking for 3 junior or intermediate profiles for daily operational support and administration for Microsoft cloud services such as SharePoint, OneDrive, Intune, Defender,

Purview, Copilot and other Microsoft 365 platforms under a time and means arrangement.

The roles involve handling incoming tickets, creating documentation on the existing infrastructure, and supporting the Platform Manager creating governance policies, monitor and change management of new features released by Microsoft. The contractors will also collaborate with administrators of other Microsoft 365 services to ensure smooth platform operations

Daily Operations and Ticket Management for SharePoint, Intune, Defender, Purview, OneDrive, Copilot

• Efficiently manage and resolve daily support tickets related to the Microsoft services, ensuring timely and effective issue resolution.

• Monitor platform performance and escalate issues when necessary, with Microsoft.

• Workload report and ongoing tasks within the team meetings (weekly)

• Use of PowerShell to update system configurations when applicable.

Documentation

• Create and maintain documentation of the current infrastructure.

• Ensure documentation is up-to-date and accessible to relevant stakeholders.

• Update documentation based on the new features released by Microsoft, including material for change management.

3. Platform Support

• Provide ongoing technical and operational support to the Platform Managers.

• Assist in platform migrations and configuration changes.

Administration of Microsoft 365 platforms

• Administer SharePoint, OneDrive, Intune, Defender, Purview and Copilot (more detailed in section 2).

• Coordinate with administrators of other Microsoft 365 services (e.g., Teams, OneDrive, Exchange) to ensure integrated platform support.

• Participate in cross-functional meetings and contribute to platform-wide initiatives.

• Handle tickets of other Microsoft services that are introduced under the responsibility of Digital Workplace service (e.g. Microsoft Bookings, Viva Insight, Purview or other Microsoft 365 applications)

Continuous Improvement

• Identify opportunities for automation and process optimisation.

• Propose improvements to enhance user experience and platform efficiency.

Microsoft 365 administration activities

Profile N1 / The contractor responsible for Intune and Defender will be responsible for:

Endpoint Management – Microsoft Intune

Ability to design, deploy and troubleshoot modern endpoint management such as:

o Design and implement device enrollment strategies (Autopilot, BYOD, corporateowned)

o Create and maintain compliance policies (e.g., encryption, OS version, secure boot) o Configure and deploy configuration profiles (Wi-Fi, VPN, certificates, security baselines)

o Package and deploy applications (Win32, Microsoft Store, LOB apps) o Implement and manage Windows Update rings and feature update policies o Troubleshoot device compliance, enrollment failures, and policy conflicts o Implement Conditional Access integration with Intune compliance

o Support mobile device management (iOS/Android) including app protection policies

Security Operations – Microsoft Defender Suite

Hands-on experience with endpoint security, threat detection, and response.

o Configure and manage Microsoft Defender for Endpoint policies o Investigate and respond to security incidents and alerts o Perform threat hunting using advanced hunting queries (KQL) o Tune detection rules to reduce false positives

o Implement and manage attack surface reduction (ASR) rules o Configure device control policies (USB, removable media) o Integrate Defender with Intune and Conditional Access o Produce security reports and recommend improvements o Support vulnerability management and remediation tracking

Virtual Desktop – Azure VDI

Ability to deploy and operate scalable virtual desktop environments. o Design and deploy Azure Virtual Desktop (AVD) environments o Configure host pools, application groups, and workspaces o Optimize session host performance (FSLogix profiles, scaling) o Implement image management strategy (golden image, updates)

o Configure identity integration with Azure AD / Entra ID o Monitor and troubleshoot user sessions and performance issues o Implement cost optimization strategies (auto-scaling, VM sizing) o Secure AVD environment using Defender and Conditional Access o Support end-user connectivity issues and access troubleshooting

Identity & Access (Supporting Scope)

Strong understanding of identity as the control plane. o Configure and manage Conditional Access policies o Implement MFA and passwordless authentication o Manage role-based access control (RBAC) o Support B2B / guest access scenarios o Integrate applications with Azure AD / Entra ID SSO o Monitor and respond to risky sign-ins and identity alerts

Cross-Platform & Operational Tasks o Document solutions and maintain operational runbooks o Automate tasks using PowerShell / Graph API

o Participate in service acceptance and transition to operations

o Work with stakeholders to translate business requirements into technical solutions o Ensure compliance with security and governance standards o Provide knowledge transfer to internal teams

PROFILE N2 : The contractor responsible for Purview and Copilot will be responsible for:

• Core Copilot Administration Tasks

Secure deployment, access control, data protection, and monitoring.

o Configure Access & Roles o Set Up Copilot Security Controls o Monitor Oversharing & Data Exposure

o Support AI Regulatory Compliance

• Core Purview Administration Tasks for Copilot:

Data security, compliance, auditing, and risk management.

o Enable Purview AI Security Features

o Apply Data Loss Prevention (DLP) for Copilot o Use Data Security Posture Management (DSPM) for AI

o Audit & Retain Copilot Activity

o Investigate & Respond to Risks

• Deployment & Governance Tasks o Follow Microsoft’s Foundational Deployment Steps o Validate Defaults & Test Policies

o Monitor Copilot Usage Analytics

PROFILE N3 : The contractor responsible for SharePoint and OneDrive will be responsible for:

• Platform Governance & Configuration

Ensure SharePoint and OneDrive are configured securely, consistently, and aligned with organizational policies.

o Tenant Level Configuration activities such as admin centre settings o Information architecture, define site templates, naming convention.

o Monitor storage, usage and quotas

• Security, Compliance & Data Protection

Protect organizational data and ensure compliance with internal and external requirements.

o Manage access and permissions

o Apply data Loss prevention & sensitivity labels and monitor

• Operational Management

Maintain a healthy, performant, and well-supported SharePoint/OneDrive environment.

o Site & Content Management o Sync & Client Management o Monitoring & Reporting

o User Enablement & Support

BEST PRACTICES for ALL

• Adhere to IT Service Management (ITSM) best practices, ensuring consistent, efficient, and customer-focused service delivery.

• Comply with the organisation’s security policies and data protection regulations, including the General Data Protection Regulation (GDPR).

• Safeguard sensitive information through appropriate handling and confidentiality measures.

• Apply appropriate access controls to ensure that only authorized personnel can access relevant systems and data.

• Maintain audit trails for all administrative actions to support accountability and traceability.

Level : Junior / Intermediate

Delivery mode : Remote (from EU Countries)

Only EU Citizens