ICT Architect

Project overview

For deployment with our client in Zurich, we are looking for an ICT Architect

Responsibilities

Define and document Zero Trust principles and target architecture, including:

Assessment of the current architecture and technical starting position, particularly in the areas of:

Development of a Zero Trust domain model, e.g., along the dimensions:

Definition of the necessary technical capabilities and dependencies, including clear separation of:

Enablers (e.g., robust asset inventory, identity lifecycle management, telemetry platforms)

concrete Zero Trust measures – with the aim of enabling realistic and implementable roadmaps.

Prioritization of concrete Zero Trust use cases instead of an abstract "Zero Trust rollout", e.g.:

Creation of reference architectures and technical guardrails that serve as binding guidelines for later projects and platform teams (including integration and security requirements).

Selection, conception, and support of technical MVPs/pilots to validate central architectural assumptions early on, reduce risks, and create the basis for later scaling of the program.

• Explicit verification
• Least privilege
• Continuous assessment of identity, device posture, and context
• Minimizing lateral movement possibilities – in line with the core understanding of NIST Zero Trust
• IAM/PAM
• AD/Entra
• Network segmentation
• Endpoint security
• Cloud platforms
• APIs
• Service identities and secrets management
• Data classification
• Telemetry/logging and monitoring
• Identity
• Devices
• Network
• Applications / Workloads
• Data
• and cross-cutting:
• Visibility
• Automation
• Governance
• Admin Access
• Third-Party Access
• Developer Access
• Cloud Workloads
• Non-Person Identities (service accounts, machine identities)
• Access to critical banking applications

Requirements

• Must: broad security architecture (IAM/PAM, network/segmentation, cloud security, application security, and data security), Zero Trust understanding, experience in large regulated environments.
• Must: Sufficient standing and communication skills to work with Enterprise Architecture, CIO organization, infrastructure teams, and application managers at eye level and help shape decisions.
• Must: Sound understanding of established Zero Trust reference models (especially NIST) and their translation into concrete technical architectures and programs.
• Can: strong program control/portfolio experience, experience in managing complex transformation initiatives.
• German: C1 – Professional language use
• English: C1 – Professional language use – Advanced (CAE)
• No subcontracting allowed!

Project details

November 23, 2026

End: February 29, 2028

100%

Zurich and remote (only within Switzerland)

Find out about your opportunities with Mr. Patrick Casutt or send us your CV directly by email to *@*.com. We look forward to hearing from you.

We refer to our data protection regulations (see at www.profilogic.com).

• Start: 2026-11
• Duration: 15 Monate
• Remote: hybrid
• Location: Zürich, Schweiz, CH
• Languages: German