IT Systems Engineer

About the job

Your Responsibilities:

Network Infrastructure

• Design, implement, and operate enterprise LAN/WAN and campus network infrastructure

• Manage and troubleshoot routing, switching, and network segmentation (VLANs, VRFs, 802.1X)

• Own firewall policies, VPN infrastructure, and network access control

• Drive network modernisation projects and hardware refresh cycles

• Monitor network health, respond to incidents, and perform root-cause analysis

Server & HCI Infrastructure

• Administer and maintain on-premises server infrastructure (Windows Server, Linux)

• Manage the Nutanix HCI environment including compute, storage, and AHV networking

• Contribute to capacity planning, hardware lifecycle management, and datacenter operations

• Design and test backup, high-availability, and disaster recovery solutions

Identity & Directory Services

• Administer Active Directory in a multi-domain forest environment

• Manage Group Policy, DNS, DHCP, PKI, and directory synchronisation

• Support hybrid identity with Microsoft Entra ID (Azure AD Connect, PTA/PHS)

• Implement privileged access controls and identity security hardening measures

IT Security & Compliance

• Contribute to endpoint security, patch management, and vulnerability remediation

• Support the implementation of security policies, hardening baselines, and compliance controls

• Participate in incident response processes and security operations activities

Projects & Collaboration

• Deliver infrastructure projects from scoping through to handover

• Maintain high-quality documentation: configurations, processes, and runbooks

• Collaborate with international IT colleagues across multiple sites

• Share knowledge and support colleagues within the team

What You Bring:

• 5+ years of hands-on experience in enterprise IT infrastructure roles

• Strong networking expertise, including:

◦ Routing & switching

◦ Firewall administration and network security design

◦ SD-WAN and modern campus network architectures

• Solid generalist background across Windows Server, Linux, and storage

• Experience with Active Directory, Group Policy, DNS/DHCP, and hybrid identity

• A structured, solution-oriented approach with strong documentation habits

• Ability to work independently and take ownership in a lean team environment

• Professional proficiency in English; German is a strong asset

Nice to Have / Advantageous

The following experience is not required, but will set your application apart:

✓ SASE platform experience

✓ Familiarity with Huawei network hardware

✓ Experience with Nutanix HCI

✓ Kubernetes and/or Infrastructure as Code experience (Terraform, Ansible, Helm)

✓ Microsoft 365 and Azure tenant administration (Entra ID, Intune, Defender XDR)