Swissquote
Senior Information Security Engineer(m/w/x)
Full-timeOn-siteSenior
Schweiz
New Job?Nejo!
The AI Job Search Engine
BABanque Internationale à Luxembourg (Suisse) SA (BIL Suisse)
Azure Cloud Architect(m/w/x)
Sachseln
Full-timeOn-siteSenior
Nejo AI Summary
Designing Azure Landing Zones and zero-trust network solutions, managing Entra ID integration for a boutique wealth management bank. Proven architecture leadership in regulated environments with deep Azure security and networking expertise required. Focused work on innovative wealth solutions for internationally active entrepreneurs.
Requirements
- Deep Azure expertise (networking, identity, security, computer, storage, containers, data services)
- Proven architecture leadership in regulated environments (ideally financial services)
- Strong security foundation (Defender, Sentinel, Key Vault, Conditional Access, PIM)
- Hybrid connectivity experience (ExpressRoute/VPN) and enterprise patterns
- SaaS integration and impact analysis experience (Avaloq)
- Collaborative mindset and willingness to support operations
- Professional English language skills
- German, French or Italian language skills (plus)
- Azure Solutions Architect Expert (AZ-104, AZ-305, AZ-700) or equivalent certifications (advantageous)
- Familiarity with banking SaaS ecosystems and compliance frameworks (nice to have)
- Knowledge of identity standards (OIDC/OAuth2, SAML) (nice to have)
- Power BI enterprise deployment and data governance (Purview) experience (nice to have)
- FinOps and cost governance in multi-subscription environments (nice to have)
- Hands-on IaC (Terraform) and pipelines (Azure DevOps/GitHub) experience (nice to have)
Tasks
- Design our Azure landing zone
- Evolve our Azure landing zone
- Embed security controls (Conditional Access, Privileged Access, Key Vault, Defender, Sentinel)
- Ensure regulatory compliance (Swiss banking, ISO 27001)
- Lead SaaS impact assessments
- Evaluate technical, security, and architectural impacts of SaaS changes (including Avaloq)
- Assess SaaS changes' impact on Azure networking, identity, integrations, governance
- Architect hub-spoke, VNets, and virtualWAN
- Design private endpoints and hybrid connectivity (ExpressRoute/VPN)
- Implement firewalls/WAF and network segmentation
- Ensure alignment with zero-trust principles
- Manage Entra ID integration
- Manage RBAC and PIM
- Manage app and service principal lifecycles
- Implement logging, metrics, and tracing (Log Analytics, Application Insights)
- Implement backup and disaster recovery (DR)
- Optimize costs using FinOps principles
- Maintain architectural blueprints
- Maintain architectural standards
- Maintain reference architecture
- Maintain Azure Kubernetes Clusters
- Perform operational tasks as needed
- Troubleshoot escalated issues
- Assist with helpdesk activities during critical incidents
- Coach team members
- Collaborate with transformation, risk, security, and data teams
- Steer vendors and CSPs for robust outcomes
Work Experience
- approx. 4 - 6 years
Education
- Bachelor's degreeOR
- Master's degree
Languages
- English – Business Fluent
- German – Basic
- French – Basic
- Italian – Basic
Tools & Technologies
- Azure
- Defender
- Sentinel
- Key Vault
- Conditional Access
- PIM
- ExpressRoute
- VPN
- Avaloq
- OIDC
- OAuth2
- SAML
- Power BI
- Purview
- Terraform
- Azure DevOps
- GitHub
Find the original job posting in its most current version here. Nejo automatically captured this job from the website of Banque Internationale à Luxembourg (Suisse) SA (BIL Suisse) and processed the information on Nejo with the help of AI for you. Despite careful analysis, some information may be incomplete or inaccurate. Please always verify all details in the original posting! Content and copyrights of the original posting belong to the advertising company.
Not a perfect match?
- Banque Internationale à Luxembourg (Suisse) SA
Operations Lead Middle Office(m/w/x)
Full-timeOn-siteSeniorSachseln - Swissquote
Head of Banking Solutions(m/w/x)
Full-timeOn-siteSeniorSchweiz - Swissquote
Network Engineer(m/w/x)
Full-timeOn-siteExperiencedSchweiz - Swissquote
Cybersecurity SOAR Playbook Engine Developer(m/w/x)
Full-timeInternshipOn-siteSchweiz
BABanque Internationale à Luxembourg (Suisse) SA (BIL Suisse)
Azure Cloud Architect(m/w/x)
Sachseln
Full-timeOn-siteSenior
Nejo AI Summary
Designing Azure Landing Zones and zero-trust network solutions, managing Entra ID integration for a boutique wealth management bank. Proven architecture leadership in regulated environments with deep Azure security and networking expertise required. Focused work on innovative wealth solutions for internationally active entrepreneurs.
Requirements
- Deep Azure expertise (networking, identity, security, computer, storage, containers, data services)
- Proven architecture leadership in regulated environments (ideally financial services)
- Strong security foundation (Defender, Sentinel, Key Vault, Conditional Access, PIM)
- Hybrid connectivity experience (ExpressRoute/VPN) and enterprise patterns
- SaaS integration and impact analysis experience (Avaloq)
- Collaborative mindset and willingness to support operations
- Professional English language skills
- German, French or Italian language skills (plus)
- Azure Solutions Architect Expert (AZ-104, AZ-305, AZ-700) or equivalent certifications (advantageous)
- Familiarity with banking SaaS ecosystems and compliance frameworks (nice to have)
- Knowledge of identity standards (OIDC/OAuth2, SAML) (nice to have)
- Power BI enterprise deployment and data governance (Purview) experience (nice to have)
- FinOps and cost governance in multi-subscription environments (nice to have)
- Hands-on IaC (Terraform) and pipelines (Azure DevOps/GitHub) experience (nice to have)
Tasks
- Design our Azure landing zone
- Evolve our Azure landing zone
- Embed security controls (Conditional Access, Privileged Access, Key Vault, Defender, Sentinel)
- Ensure regulatory compliance (Swiss banking, ISO 27001)
- Lead SaaS impact assessments
- Evaluate technical, security, and architectural impacts of SaaS changes (including Avaloq)
- Assess SaaS changes' impact on Azure networking, identity, integrations, governance
- Architect hub-spoke, VNets, and virtualWAN
- Design private endpoints and hybrid connectivity (ExpressRoute/VPN)
- Implement firewalls/WAF and network segmentation
- Ensure alignment with zero-trust principles
- Manage Entra ID integration
- Manage RBAC and PIM
- Manage app and service principal lifecycles
- Implement logging, metrics, and tracing (Log Analytics, Application Insights)
- Implement backup and disaster recovery (DR)
- Optimize costs using FinOps principles
- Maintain architectural blueprints
- Maintain architectural standards
- Maintain reference architecture
- Maintain Azure Kubernetes Clusters
- Perform operational tasks as needed
- Troubleshoot escalated issues
- Assist with helpdesk activities during critical incidents
- Coach team members
- Collaborate with transformation, risk, security, and data teams
- Steer vendors and CSPs for robust outcomes
Work Experience
- approx. 4 - 6 years
Education
- Bachelor's degreeOR
- Master's degree
Languages
- English – Business Fluent
- German – Basic
- French – Basic
- Italian – Basic
Tools & Technologies
- Azure
- Defender
- Sentinel
- Key Vault
- Conditional Access
- PIM
- ExpressRoute
- VPN
- Avaloq
- OIDC
- OAuth2
- SAML
- Power BI
- Purview
- Terraform
- Azure DevOps
- GitHub
Find the original job posting in its most current version here. Nejo automatically captured this job from the website of Banque Internationale à Luxembourg (Suisse) SA (BIL Suisse) and processed the information on Nejo with the help of AI for you. Despite careful analysis, some information may be incomplete or inaccurate. Please always verify all details in the original posting! Content and copyrights of the original posting belong to the advertising company.
About the Company
Banque Internationale à Luxembourg (Suisse) SA (BIL Suisse)
Industry
FinancialServices
Description
BIL Suisse is a boutique bank providing innovative wealth solutions for internationally active entrepreneurs and families.
Not a perfect match?
- Swissquote
Senior Information Security Engineer(m/w/x)
Full-timeOn-siteSeniorSchweiz - Banque Internationale à Luxembourg (Suisse) SA
Operations Lead Middle Office(m/w/x)
Full-timeOn-siteSeniorSachseln - Swissquote
Head of Banking Solutions(m/w/x)
Full-timeOn-siteSeniorSchweiz - Swissquote
Network Engineer(m/w/x)
Full-timeOn-siteExperiencedSchweiz - Swissquote
Cybersecurity SOAR Playbook Engine Developer(m/w/x)
Full-timeInternshipOn-siteSchweiz