Senior System Engineer
<div class="show-more-less-html__markup show-more-less-html__markup--clamp-after-5 relative overflow-hidden"> <p>Who Our Client Is</p><p><br/></p><p>Our client builds real-time testing hardware and software that engineers worldwide rely on to validate control systems before they ever reach production. From automotive to aerospace, their technology sits at the intersection of precision engineering and cutting-edge software. Founded in Switzerland in 2007, they operate globally with locations in the US, Germany, and China, and are growing fast.</p><p>They are a team of people who move quickly, think carefully, and take ownership. They use AI deliberately and responsibly to accelerate what they do, and believe in testing ideas fast, learning from results, and continuously improving.</p><p><br/></p><p>The Role</p><p><br/></p><p>Our client is looking for a hands-on Senior IT Infrastructure & Security Engineer to join their Corporate IT team. You will be a key technical contributor — someone who keeps platforms running reliably while also thinking about where they need to go architecturally. The work splits roughly 70% operations and 30% architecture and project delivery.</p><p>You will sit within a small, experienced IT team alongside a Senior Data & Automation Engineer, a Systems Support Engineer, and the CIO/CISO. You will own the execution while the CIO/CISO sets the strategic and governance direction.</p><p><br/></p><p>What You Will Do</p><p><br/></p><p><strong>Cloud & Infrastructure</strong> Own the day-to-day operation of a hybrid cloud environment across Azure, Azure Local HCI, Azure Virtual Desktop, storage, databases, and backup infrastructure (Azure and Veeam). Contribute to architectural decisions that keep platforms modern, resilient, and scalable.</p><p><strong>Identity & Access</strong> Operate and continuously improve the identity and access framework using Microsoft Entra ID. Apply Zero Trust principles in practice — least-privilege access, phishing-resistant authentication, automated Joiner/Mover/Leaver workflows via Entra Lifecycle Workflows, and scalable access governance.</p><p><strong>Security Engineering & Operations</strong> Take the operational lead on security tooling — Microsoft Defender XDR and Microsoft Sentinel. This means tuning policies, managing Attack Surface Reduction, triaging alerts, running investigation workflows, onboarding log sources, building detection use cases, and driving Microsoft Secure Score upward in a meaningful way.</p><p><strong>Incident Response</strong> Act as the hands-on execution lead when security incidents occur. The CISO owns strategy and crisis direction — you own the operational response: containment actions, investigation, recovery coordination, and structured post-incident review.</p><p><strong>Backup & Business Continuity</strong> Maintain backup readiness across the organization, ensure immutable backup protection is in place, and keep recovery procedures tested, documented, and actually usable when it matters.</p><p><strong>Network & Perimeter</strong> Contribute to network design and operations across multiple global locations — segmentation, remote access, firewall and perimeter services. Keep things documented, secure, and available.</p><p><br/></p><p>What You Bring</p><p><br/></p><ul><li>A degree, Swiss apprenticeship, professional diploma, or equivalent experience in IT infrastructure, cloud engineering, or cybersecurity</li><li>Solid hands-on experience with Microsoft hybrid environments: Azure, Microsoft 365, Windows Server, virtualization, storage, backup, and PowerShell</li><li>Strong practical knowledge of Microsoft Entra ID, Zero Trust, and identity lifecycle management</li><li>Real-world experience operating Microsoft Defender XDR and Microsoft Sentinel — not just configuring them, but actively running security operations with them</li><li>Experience supporting incident response, disaster recovery testing, and post-incident improvement cycles</li><li>Solid grounding in network security — segmentation, remote connectivity, perimeter services across multiple sites</li><li>A clear engineering mindset: you own your work, communicate well in English, and can balance operational firefighting with longer-term improvement</li></ul><p><br/></p><p>Nice to Have</p><p><br/></p><ul><li>Microsoft certifications: AZ-104, AZ-305, SC-200, SC-300, SC-100, AZ-800, AZ-801</li><li>Direct experience with Azure Local HCI, including Hyper-V, Storage Spaces Direct, RDMA, and Azure Arc</li><li>Familiarity with Jira Service Management or comparable ITSM tooling</li></ul><p><br/></p><p>Why This Role</p><p><br/></p><ul><li>A technically serious environment with real infrastructure complexity</li><li>A small IT team where your work is visible and your impact is tangible</li><li>An organization that uses AI as a genuine productivity tool, not a talking point</li><li>Switzerland-based with an international footprint and global colleagues</li><li>Room to grow architecturally, not just operationally</li></ul><p></p> </div>