Microsoft System Administrator

About the Role As a Microsoft System Administrator & Cybersecurity Engineer, you will be part of our IT Operations team, working closely with Helpdesk and Linux Admins, Network Engineers, and the wider Cybersecurity function, as well as the rest of the business teams. You'll work on optimising and securing our user infrastructure with the flexibility to be creative in your solution designs.

This hybrid role is ideal for someone with a strong Microsoft systems background who is passionate about cybersecurity or a security-minded engineer looking to deepen their Microsoft expertise. You'll have the opportunity to shape how we protect our environment from the ground up, not just react to threats.

Da Vinci offers an exciting and dynamic work environment, where employees are given the freedom to come up with great ideas and the space to push these to completion. This is a unique opportunity to be part of a successful and fast-growing company.

Responsibilities Microsoft Infrastructure:

Engineer and maintain a global Microsoft Directory infrastructure that incorporates security best practices, business continuity, high availability, and scalability

Manage and optimise our Microsoft 365, Intune, Entra ID (Azure AD), and integrated on-premise Active Directory environments

Automate, standardise, and document IT processes to optimise work structures using PowerShell, Infrastructure as Code (IaC), and Autopilot

Manage the full lifecycle of Windows servers and workstations: build, deploy, maintain, and decommission

Perform performance monitoring and system capacity management

Perform remote troubleshooting to diagnose production issues

Support internal teams on hardware and software issues

Cybersecurity:

Proactively identify and mitigate security risks across our Microsoft ecosystem, foreseeing and preventing issues before they arise and implementing permanent fixes when problems do occur

Perform periodic security audits of the environment, enforcing compliance with industry standards and frameworks (e.g., CIS Benchmarks, NIST, ISO 27001)

Implement and manage identity & access management (IAM) policies, including conditional access, MFA, privileged access management (PAM), and zero-trust principles

Monitor, investigate, and respond to security alerts using tools such as Microsoft Defender for Endpoint, Microsoft Sentinel, and Defender for Identity

Harden Windows server and desktop configurations in line with security baselines

Collaborate with the Cybersecurity team on incident response, vulnerability management, and threat hunting initiatives

Stay current with the evolving threat landscape and recommend improvements to our security posture

Requirements Must-Have

3+ years of experience working with Microsoft systems, including Microsoft 365, Intune, Entra ID, and integrated on-premise Active Directory

Proven experience building effective and scalable systems using Infrastructure as Code (IaC), PowerShell scripting, and Autopilot

Solid understanding of networking, authentication, and identity management principles

Windows desktop and server configuration management skills

A demonstrable interest in or experience with cybersecurity, whether through hands-on work, certifications, personal projects, or CTF participation

Degree in Computer Science, Engineering, ICT, Cybersecurity, or a related field

Ability to manage multiple projects spanning multiple teams to successful completion

Strong communication skills, including the ability to effectively communicate technical information to a non-technical audience

Nice-to-Have

Relevant security certifications such as SC-200, SC-300, AZ-500

Experience with Microsoft Sentinel (SIEM) or similar security monitoring platforms

Familiarity with zero-trust architecture and modern identity security models

Experience with vulnerability scanning and remediation tools

Knowledge of compliance frameworks (CIS, NIST, ISO 27001)

Experience with Linux administration

Benefits :

An opportunity to work in a high-tech, driven environment

A base salary of EUR 70K to 100K (based on experience)

Excellent variable pay and growth opportunities

A relocation package when moving from abroad, including a relocation budget, flight coverage, house-finding service and expat support

Fresh breakfast, lunch and dinner prepared by our in-house chef

Social events and after-work drinks

Reimbursement of travel costs

Sponsored gym membership

In-house game room (pool table, board games and console games)