Architect for M365 and MS Entra ID (open to all genders)

The ZIB is the central IT service provider for the Lower Saxony judiciary and is responsible for a modern IT infrastructure comprising approximately 18,000 PC workstations. In addition, our team of 400 colleagues manages numerous digitization projects aimed at modernizing the judiciary.

To strengthen our team in Department 3 – Operations, we are seeking, as soon as possible, a Architect for M365 and MS Entra ID (f/m/d).

The place of work can be flexibly assigned to a Lower Saxony judicial authority near your home. Occasional presence at the Celle location is required.

Your Responsibilities

• You will assume the coordinating role for M365 and Entra ID between the relevant specialist teams at the ZIB and with Microsoft.
• You will design the architecture of our Microsoft 365 tenant. In doing so, you will integrate identity verification (AD/Entra ID) with collaboration tools (Teams, Exchange) and client connectivity (OneDrive, SharePoint).
• You will create administration concepts and role profiles.
• You define security policies within M365 (Conditional Access, Intune policies, information protection) and ensure compliance using tools such as Azure Information Protection, Purview, and Conditional Access.
• You regularly evaluate the Microsoft roadmap for relevance, costs, and technical implications for our functional areas.
• You help ensure that on-premises systems (servers, storage, backup) meet the requirements of cloud services (e.g., Hybrid Exchange, Entra Connect, storage performance for cached data).
• You monitor usage data (storage limits in SharePoint/OneDrive) and manage the budget for add‑ons or cloud resources.

What Sets You Apart

• A relevant college degree (e.g., computer science) or equivalent practical skills in M365 and Entra ID.
• Proficiency in computing, storage, and networking (e.g., hub-and-spoke architectures, site-to-site VPN).
• Experience with Identity & Access Management (Entra ID/Azure AD) as the central link between Entra ID and M365.
• Knowledge of the Azure Well‑Architected Framework for optimizing costs, security, and reliability.
• Ability to analyze complex on‑premises infrastructures and develop migration strategies (Lift & Shift, Cloud Native), as well as to perform financial planning using the Azure Pricing Calculator while considering SKUs and licensing models.
• Ideally, basic knowledge of data protection and IT security.

What We Also Expect

• Ability to work in a team, a spirit of innovation, and a high degree of personal responsibility.
• C1‑level German proficiency as well as good English skills for working with international technologies and documentation.
• Willingness to travel within Lower Saxony.
• Willingness to undergo a security clearance check pursuant to Section 7(1) of the Lower Saxony Security Clearance Act (Nds. SÜG).

What We Offer

• A permanent and secure position with compensation in accordance with the collective bargaining agreement up to pay grade 12 TV‑L (depending on qualifications).
• Annual bonus (Christmas bonus) and company pension plan.
• Flexible work models with up to 90% remote work and flex time.
• Extensive training opportunities and career development prospects in the future‑oriented field of AI.
• Health‑promoting benefits such as company fitness programs and attractive additional perks, e.g., special offers through Corporate Benefits.
• Opportunity for civil service status if requirements are met.

Equal Opportunity Employer

• The State of Lower Saxony actively promotes the professional development of women in fields and positions where they are underrepresented. Applications from women are therefore particularly encouraged in accordance with the NGG.
• Applicants with severe disabilities will be given preferential consideration if they have the same qualifications and abilities.