Job description

We are seeking a skilled Microsoft Graph API and SharePoint Online expert to assist us in configuring webhook subscriptions for both SharePoint document libraries and SharePoint lists, using the Microsoft Graph API. This project is part of a broader automation and integration initiative to trigger intelligent workflows when files or list items are created or updated. While we have internal Office 365 administrators in place, we need someone who can collaborate closely with our IT team to troubleshoot and resolve setup challenges; particularly around Azure AD app configuration, permissioning, and webhook registration behavior. The ideal candidate will have hands-on experience in Graph-based webhook creation, troubleshooting Graph call issues, and advising IT/O365 admins on admin consent, OAuth scopes, and resource targeting for SharePoint objects (lists, libraries, folders). ⸻ Our Current Challenges We are encountering blockers implementing webhook subscriptions, including: • Correctly configuring the resource paths for both SharePoint document libraries and SharePoint lists • Receiving empty GET /subscriptions responses even after adding Sites.Read.All, Lists.Read.All, and Webhook.ReadWrite.All permissions • Experiencing silent failures when calling POST /subscriptions, no validation call received, no webhook registered • Adding permissions and refreshing tokens (e.g., in Postman) without any observable change in behavior, possibly due to scope caching or missing admin consent • Confusion around which permissions are needed for lists vs. libraries, and when delegated vs application permissions are required • Trouble validating the notificationUrl (we never receive the validation token on first contact) We need someone to help diagnose and fix these challenges in collaboration with our internal team. ⸻ Required Expertise • Microsoft Graph API - especially around /subscriptions, /sites, /lists, /drives • Deep knowledge of SharePoint Online site structures, lists, document libraries, and permissions • Azure AD App Registration, delegated vs. application scopes • OAuth 2.0 workflows and token validation strategies • Experience troubleshooting webhook event delivery and callback validation • Comfortable working with and advising corporate O365 administrators

Requirements