M365 Cloud Architect – Enterprise Isolation & Security

For our banking client in Zurich, Bern, or Basel, we are looking for an experienced, motivated, and open-minded M365 Cloud Architect – Enterprise Isolation & Security. Your Responsibilities: Design and implementation of secure Microsoft 365 architectures with a focus on tenant isolation, multi-tenant scenarios, and secure collaboration boundaries Definition and enforcement of data segregation policies, Information Barriers, and Data Loss Prevention (DLP) Architecture of secure identity and access paths using Microsoft Entra ID (Conditional Access, Privileged Identity Management, External Identities / B2B-Isolation) Securing M365 services (Teams, SharePoint, OneDrive, Exchange) against data exfiltration and unauthorized internal and external access Development of governance concepts as well as automation of security configurations using PowerShell or Infrastructure as Code (IaC) Advising management, the compliance department, and SecOps teams on the implementation of regulatory requirements (e.g., ISO 27001, TISAX, BAIT/VAIT) Your Profile: Several years of professional experience in IT architecture with a focus on enterprise security architectures in the Microsoft environment, ideally within the banking sector Deep technical understanding of Microsoft Entra ID, Microsoft Purview (Information Protection, Data Loss Prevention), and Microsoft Defender for Cloud Apps Demonstrable experience