Microsoft 365 Endpoint & Automation Engineer

what you'll do

For us, an endpoint is everything that runs Windows: the laptops in our offices, the checkout systems and other devices in our stores. As part of the M365 Chapter, you make sure these devices are configured, deployed, and, above all, healthy. It is not enough to know that the platform behind them is running. We want to understand the health of individual endpoints through telemetry, detect deviations automatically, and resolve issues before they affect store operations. We are doing this at the scale of thousands of endpoints, so manual checks are not an option. You will also contribute to our new physical Digital Workspace in the stores, including configuration, rollout, and supportability.The Chapter is on its way from a mainly operational team to an engineering-driven platform team. We are building up first-line capability at the Service Desk, so that intake, triage and standard solutions no longer land with us. Complex technical issues that require platform expertise remain with the Chapter. You investigate these issues, but importantly use what you learn to improve monitoring, automation, and the platform itself. Our ambition is a split of roughly 60% engineering and a maximum of 40% operations. That is a journey: today operations still take a large share of our time, and you will help us bring it down by treating recurring incidents as engineering problems: identifying the root cause, improving telemetry and implementing structural or automated solutions.You analyse root causes independently, build remediations and monitoring, and deliver your scripts and solutions through Git, pull requests and CI/CD. You take technical ownership of one or more endpoint services or capabilities, including their configuration, automation, monitoring, documentation and operational health. You contribute improvements to our engineering practices and support junior colleagues in their daily engineering work.You work from a DevOps mindset: you build it, you run it.We are not looking for a second-line support engineer who gets swallowed up by reactive tickets. We are looking for a hands-on Microsoft 365 Endpoint & Automation Engineer who uses troubleshooting as the starting point for engineering: turning recurring problems into monitoring, automation and structural improvements.

what we offer

At HEMA, you will learn and grow in an environment where people genuinely work together. You will receive guidance, valuable feedback, and plenty of opportunities to develop yourself. In addition, you will receive:

• A competitive salary based on your knowledge and experience.
• 30 vacation days (based on a 40-hour working week) and 8% holiday allowance.
• A variable bonus of up to 14% of your annual salary, depending on collective performance.
• A monthly net expense allowance.
• A fixed year-end bonus of 4% of your annual salary.
• 15% employee discount on all your HEMA favourites.
• An excellent pension scheme.
• Travel allowance of €0.23 per kilometre (from 10 km one-way travel up to a maximum of 30 km).
• Access to our Benefits at Work platform, offering discounts on leading brands, experiences and activities.

what you bring

You are a hands-on engineer with a strong troubleshooting mindset who enjoys building and improving solutions in a team that takes ownership. You work independently on well-defined solutions, communicate comfortably with stakeholders such as the Service Desk and store operations, and understand the importance of delivering secure, maintainable and well-documented work. You use automation and modern engineering practices to solve endpoint problems structurally, and you are motivated to deepen your skills in Microsoft Graph, testing, and CI/CD.In addition, you bring:

• Bachelor's level of thinking and working, gained through education or relevant professional experience.
• At least 3 years of relevant experience in Windows endpoint management, workplace engineering or Microsoft cloud environments.
• Strong troubleshooting skills in Windows endpoint environments, including complex second and third-line issues.
• You understand endpoint security principles and consider security, least privilege and manageability when designing or changing endpoint configurations.
• Practical experience with Microsoft Intune and modern Windows endpoint management; experience with Configuration Manager (SCCM) is a plus.
• Experience writing and maintaining PowerShell for endpoint management, troubleshooting or automation.
• Experience working with Git, pull requests and CI/CD using Azure DevOps, GitHub or a comparable engineering platform.
• Practical experience with monitoring and automation, and experience delivering technical changes through Git-based workflows.
• Experience using logs, telemetry or endpoint analytics to investigate health and behavior across a larger device estate.
• Practical experience with Intune and Windows endpoint management, including configuration, application packaging and deployment, compliance and troubleshooting.
• Experience with Microsoft Graph, automated testing and CI/CD, or a demonstrable ability to grow into these technologies.
• A proactive mindset, strong collaboration skills, and a focus on delivering tangible results.

HEMA

At HEMA, more than 17,000 colleagues work together to make everyday life better and more beautiful. We create products that are practical, better designed, and built to last longer. Through our colourful stores, online channels, and strong partnerships, we continue to grow and evolve. We are proud of how far we have come, but we are far from finished. HEMA is truly HEMA again and ready for the next step. Our ambition is clear: to become a market leader in a challenging retail environment. We do this together as one team, by playing to win. That means being curious, seizing opportunities, collaborating with energy, and always striving for the best result. Will you join us?