Senior Workplace Automation Engineer

Project overview

Assignment Description

For the further development of the digital work environment, the RIVM is looking for an experienced workplace engineer who automates management and security processes. The assignment focuses on a secure, centrally managed Windows 11 workplace that can be delivered and maintained with minimal manual management effort.

Where will you end up:

The assignment will be carried out within the Staff Generic Provisions and specifically the Digital Work Environment domain. The current work environment uses, among other things, Microsoft Intune and Entra ID for the workplace, endpoint security, and Zero Trust access to internal applications. The engineer will collaborate with product owners, architects, security specialists, engineers, and management teams.

Background of the assignment

We are not looking for a traditional administrator who primarily performs manual changes. We are looking for an engineer who translates processes into repeatable, testable, and transferable automation using PowerShell, Microsoft Graph, APIs, Git, and pipelines.

• Improve and automate Windows Autopilot, onboarding, changes, and offboarding
• Automate Intune and Entra ID configurations, applications, policies, assignments, and provisioning
• Build PowerShell, Microsoft Graph, and API integrations
• Manage scripts and configurations via Git and set up CI/CD pipelines
• Develop reusable modules, templates, compliance checks, and remediations
• Detect and controlledly resolve configuration deviations
• Automate endpoint security policies, baselines, firewall, and encryption configurations
• Automate application onboarding and access policy within the secure private access provision
• Realize self-service, logging, error handling, and transferable documentation
• Use security signals for monitoring and controlled remediations

Requirements

General:

Specific:

Wishes

Additional Knowledge:

Other Position Wishes:

Competencies

Additional Information

When you, as a supplier, offer a professional to us and they are placed, we will need information from you as a contracting party, including regarding the Chain Liability Act (Wet keten- en inlenersaansprakelijkheid). The purpose of the 'WKA' is to prevent abuse in the remittance of payroll taxes at all levels in the chain, from supplier to client. We cover these risks for our clients through a blocked account, the G-account. This is an account to which a portion of the invoice amount is deposited and from which you can pay payroll taxes and VAT to the Tax Authorities.

The percentage to be deposited depends on whether you have a SNA certification (NEN-4400-1 or NEN-4400-2) and whether your company is established in the Netherlands or abroad. You can apply for the G-account from the Tax Authorities. If you cannot obtain a G-account (and you can provide proof of this from the Tax Authorities), you also have the option to submit an accountants' report (assurance report regarding personnel lending) quarterly. In this report, a certified accountant (AA or RA) will issue a statement on the accuracy, completeness, and timeliness of the remittances.

Please note that the costs for this report are at your own expense.

• Demonstrable experience with independently setting up, managing, and improving Windows 11 workplaces with Microsoft Intune and Microsoft Entra ID. The candidate understands the coherence between device identity, configuration policies, compliance, and access and can analyze and solve problems within this coherence. (automated)
• Demonstrable experience with independently developing and applying automation with PowerShell, Microsoft Graph, and relevant APIs. The candidate translates recurring management tasks into repeatable solutions with logging and error handling, where re-execution does not cause unwanted changes.
• Demonstrable experience with automating workplace processes, including Windows Autopilot, provisioning, onboarding, changes, and offboarding. Assessment will be based on the extent to which the candidate can connect individual technical steps into a working process, including applications, policies, and assignments.
• Demonstrable experience with controlled development, testing, and deployment of automation with Git, code reviews, automated checks or tests, and pipelines. The candidate can explain how changes are checked and released and how to recover from errors.
• Practical knowledge of secure automation within Microsoft environments. This concerns minimally necessary rights, appropriate Microsoft Graph/API permissions, secure authentication, and careful management of used identities, certificates, or secrets. The candidate can substantiate the choices made.
• Demonstrable experience with delivering automation in a transferable manner. The candidate provides understandable documentation and targeted knowledge transfer so that other administrators can use the solution, investigate problems, and implement changes.
• The candidate possesses analytical ability, ownership, collaboration skills, and clear communication. The candidate translates management problems into feasible automation solutions, coordinates choices with involved administrators and specialists, and communicates understandably about progress, consequences, and bottlenecks.

Project details

• Start: 2026-11-01T23:00:00
• Location: Bilthoven Utrecht, NL
• Languages: Dutch