Own the architecture and technical delivery of the Microsoft tenant foundation for BayWa r.e. r.e.new, ensuring that the tenant is established in a secure, supportable and target-architecture-aligned manner and is ready for downstream Dynamics 365 and M365 workloads.
Key responsibilities
- Lead the design of the new Microsoft Entra / M365 tenant foundation.
- Define tenant architecture, naming standards, tenant strategy, administrative model and core configuration principles.
- Define and validate:
- Custom domain and UPN strategy.
- Tenant geography/data-residency decisions.
- Administrative roles and privileged access approach.
- Global Administrator and emergency/break-glass account model.
- Administrator MFA requirements.
- Initial licensing and licence-assignment approach.
- Ensure the foundation is aligned to BayWa r.e.’s target single-tenant, Microsoft-first architecture.
- Define the boundary between:
- M365/Entra tenant foundation.
- Azure platform/landing zone.
- Security services.
- Dynamics 365 / Power Platform environments.
- Coordinate architecture decisions with the Azure, Security and Dynamics workstreams.
- Produce the Tenant Foundation / Architecture Guardrails document, including architecture decisions, assumptions, interfaces and dependencies.
- Lead technical design workshops and architecture reviews.
- Define and execute the technical readiness criteria required to declare the tenant Dynamics-ready.
- Provide technical oversight to the M365/Entra Engineer during configuration.
- Support handover to the Dynamics / Business Suite team.
Required skills and experience
- 8–12+ years of Microsoft infrastructure / Up-to-date Workplace experience.
- Strong architecture expertise across:
- Microsoft Entra ID.
- Microsoft 365 tenant architecture.
- Identity and access management.
- Microsoft licensing concepts.
- Administrative role design/RBAC.
- MFA and privileged administration.
- Experience designing greenfield or carve-out Microsoft tenants.
- Understanding of Microsoft Dynamics 365 / Power Platform dependencies on Entra and M365.
- Ability to define architecture boundaries across Azure, Security and Digital Workplace teams.
- Experience with European data residency, GDPR and enterprise security requirements.
- Strong technical documentation and customer workshop skills.