About the Role
As a Microsoft System Administrator & Cybersecurity Engineer, you will be part of our IT Operations team, working closely with Helpdesk and Linux Admins, Network Engineers, and the wider Cybersecurity function, as well as the rest of the business teams. You'll work on optimising and securing our user infrastructure with the flexibility to be creative in your solution designs.
This hybrid role is ideal for someone with a strong Microsoft systems background who is passionate about cybersecurity or a security-minded engineer looking to deepen their Microsoft expertise. You'll have the opportunity to shape how we protect our environment from the ground up, not just react to threats.
Da Vinci offers an exciting and dynamic work environment, where employees are given the freedom to come up with great ideas and the space to push these to completion. This is a unique opportunity to be part of a successful and fast-growing company.
Responsibilities
Microsoft Infrastructure:
Engineer and maintain a global Microsoft Directory infrastructure that incorporates security best practices, business continuity, high availability, and scalability
Manage and optimise our Microsoft 365, Intune, Entra ID (Azure AD), and integrated on-premise Active Directory environments
Automate, standardise, and document IT processes to optimise work structures using PowerShell, Infrastructure as Code (IaC), and Autopilot
Manage the full lifecycle of Windows servers and workstations: build, deploy, maintain, and decommission
Perform performance monitoring and system capacity management
Perform remote troubleshooting to diagnose production issues
Support internal teams on hardware and software issues
Cybersecurity:
Proactively identify and mitigate security risks across our Microsoft ecosystem, foreseeing and preventing issues before they arise and implementing permanent fixes when problems do occur
Perform periodic security audits of the environment, enforcing compliance with industry standards and frameworks (e.g., CIS Benchmarks, NIST, ISO 27001)
Implement and manage identity & access management (IAM) policies, including conditional access, MFA, privileged access management (PAM), and zero-trust principles
Monitor, investigate, and respond to security alerts using tools such as Microsoft Defender for Endpoint, Microsoft Sentinel, and Defender for Identity
Harden Windows server and desktop configurations in line with security baselines
Collaborate with the Cybersecurity team on incident response, vulnerability management, and threat hunting initiatives
Stay current with the evolving threat landscape and recommend improvements to our security posture
Requirements
Must-Have
3+ years of experience working with Microsoft systems, including Microsoft 365, Intune, Entra ID, and integrated on-premise Active Directory
Proven experience building effective and scalable systems using Infrastructure as Code (IaC), PowerShell scripting, and Autopilot
Solid understanding of networking, authentication, and identity management principles
Windows desktop and server configuration management skills
A demonstrable interest in or experience with cybersecurity, whether through hands-on work, certifications, personal projects, or CTF participation
Degree in Computer Science, Engineering, ICT, Cybersecurity, or a related field
Ability to manage multiple projects spanning multiple teams to successful completion
Strong communication skills, including the ability to effectively communicate technical information to a non-technical audience
Nice-to-Have
Relevant security certifications such as SC-200, SC-300, AZ-500
Experience with Microsoft Sentinel (SIEM) or similar security monitoring platforms
Familiarity with zero-trust architecture and modern identity security models
Experience with vulnerability scanning and remediation tools
Knowledge of compliance frameworks (CIS, NIST, ISO 27001)
Experience with Linux administration
Benefits :
An opportunity to work in a high-tech, driven environment
A base salary of EUR 70K to 100K (based on experience)
Excellent variable pay and growth opportunities
A relocation package when moving from abroad, including a relocation budget, flight coverage, house-finding service and expat support
Fresh breakfast, lunch and dinner prepared by our in-house chef
Social events and after-work drinks
Reimbursement of travel costs
Sponsored gym membership
In-house game room (pool table, board games and console games)