CA
M365 Cloud Architekt:in – Enterprise Isolation & Security
Coopers Group AG
Contract type
Ongoing
Work mode
Remote · Switzerland
Experience
3 years
Job description
Design and implement secure Microsoft 365 architectures for a bank client, focusing on tenant isolation, data separation and security governance.
At a glance
- Work mode
- Remote · Switzerland
- Languages
- German – fluent, English – fluent
What you'll do
- Design and implement secure Microsoft 365 architectures focusing on tenant isolation, multi-tenant scenarios and secure collaboration boundaries
- Define and enforce policies for data separation, information barriers and data loss prevention (DLP)
- Architect secure identity and access paths using Microsoft Entra ID (Conditional Access, PIM, External Identities / B2B isolation)
- Secure M365 services (Teams, SharePoint, OneDrive, Exchange) against data leakage and unauthorized access from outside and inside
- Develop governance concepts and automate security configurations using PowerShell or Infrastructure as Code (IaC)
- Advise management, compliance and SecOps teams on implementing regulatory requirements (e.g. ISO 27001, TISAX, BAIT/VAIT)
What we're looking for
- Several years of experience in IT architecture with a focus on enterprise security architectures in the Microsoft environment, ideally within banking
- Deep technical understanding of Microsoft Entra ID, Microsoft Purview (Information Protection, DLP) and Microsoft Defender for Cloud Apps
- Proven experience with tenant separation, cross-tenant scenarios, information barriers and encryption technologies (Customer Key, BYOK)
- Ability to translate complex regulatory requirements into pragmatic and secure technical cloud designs
- Relevant Microsoft certifications such as Enterprise Administrator Expert, Cybersecurity Architect Expert (SC-100) or Information Protection Administrator (SC-400)
- Fluent in German and English