Senior M365 and Azure Architect

The Senior M365 and Azure Engineer/ Architect is responsible for securing and operating Microsoft 365 and Azure environments, with a strong focus on identity security, data protection, email governance, and automation. The role supports Zero Trust implementation and ensures secure and compliant use of Microsoft cloud and AI-enabled services.

Essential Job Functions

• Secure and manage Microsoft Azure and Microsoft 365 services in hybrid cloud environments, with a focus on security controls and governance frameworks
• Contribute to enterprise IAM architecture, including least-privilege and compliance controls
• Implement and operate Entra ID security controls (Conditional Access, MFA, SSO, enterprise applications)
• Manage identity governance (PIM, RBAC, access reviews, lifecycle automation)
• Support hybrid identity integrations (Entra ID Connect / Active Directory),
• Manage and secure Microsoft 365 services with a focus on Exchange Online
• Design and implement data protection using Microsoft Purview (DLP, sensitivity labels, compliance policies)
• Manage email security and governance, including external sharing and protection controls
• Support AI governance controls, ensuring secure and compliant data usage
• Develop and maintain automation using PowerShell and scripting
• Monitor and respond to security and data protection incidents
• Collaborate with security, network, and IAM teams to implement security controls (Conditional Access, MFA, Microsoft Defender)
• Maintain documentation and ensure SLA/KPI adherence
• Handle incidents, changes, and requests in line with ITIL processes

Qualifications And Experience

• Master/ Bachelor’s degree or equivalent professional experience
• 5+ years of experience with Microsoft 365 and Azure
• Proven experience with Purview, Exchange Online, and Entra ID
• Experience in enterprise IAM implementations

Skills and Competencies

• Strong experience with Microsoft Azure, with broad knowledge of core services, security, and hybrid cloud environments.
• Deep expertise in Microsoft Entra ID (Conditional Access, MFA, SSO, PIM, RBAC, Zero Trust).
• Strong experience with Entra ID Connect and hybrid identity
• Proven experience with IAM architecture and least-privilege models.
• Strong expertise in Microsoft Purview (DLP, sensitivity labels, compliance).
• Strong expertise in Exchange Online (email security, governance)..
• Advanced PowerShell scripting and automation
• Understanding of AI governance and data protection in AI-enabled environments.
• Strong troubleshooting and communication skills.
• ITIL knowledge; English required, German is a plus.

This job description should not be construed to imply that these requirements and expectations are all-inclusive. In addition to items listed, incumbents are expected to follow company policies, adhere to company processes and programs and perform other related duties as assigned.