About the Role
As a Microsoft System Administrator & Cybersecurity Engineer, you will be part of our IT Operations team, working closely with Helpdesk and Linux Admins, Network Engineers, and the wider Cybersecurity function, as well as the rest of the business teams. You'll work on optimising and securing our user infrastructure with the flexibility to be creative in your solution designs.
This hybrid role is ideal for someone with a strong Microsoft systems background who is passionate about cybersecurity or a security-minded engineer looking to deepen their Microsoft expertise. You'll have the opportunity to shape how we protect our environment from the ground up, not just react to threats.
Da Vinci offers an exciting and dynamic work environment, where employees are given the freedom to come up with great ideas and the space to push these to completion. This is a unique opportunity to be part of a successful and fast-growing company.
Responsibilities
Microsoft Infrastructure:
- Engineer and maintain a global Microsoft Directory infrastructure that incorporates security best practices, business continuity, high availability, and scalability
- Manage and optimise our Microsoft 365, Intune, Entra ID (Azure AD), and integrated on-premise Active Directory environments
- Automate, standardise, and document IT processes to optimise work structures using PowerShell, Infrastructure as Code (IaC), and Autopilot
- Manage the full lifecycle of Windows servers and workstations: build, deploy, maintain, and decommission
- Perform performance monitoring and system capacity management
- Perform remote troubleshooting to diagnose production issues
- Support internal teams on hardware and software issues
Cybersecurity:
- Proactively identify and mitigate security risks across our Microsoft ecosystem, foreseeing and preventing issues before they arise and implementing permanent fixes when problems do occur
- Perform periodic security audits of the environment, enforcing compliance with industry standards and frameworks (e.g., CIS Benchmarks, NIST, ISO 27001)
- Implement and manage identity & access management (IAM) policies, including conditional access, MFA, privileged access management (PAM), and zero-trust principles
- Monitor, investigate, and respond to security alerts using tools such as Microsoft Defender for Endpoint, Microsoft Sentinel, and Defender for Identity
- Harden Windows server and desktop configurations in line with security baselines
- Collaborate with the Cybersecurity team on incident response, vulnerability management, and threat hunting initiatives
- Stay current with the evolving threat landscape and recommend improvements to our security posture
Requirements
Must-Have
- 3+ years of experience working with Microsoft systems, including Microsoft 365, Intune, Entra ID, and integrated on-premise Active Directory
- Proven experience building effective and scalable systems using Infrastructure as Code (IaC), PowerShell scripting, and Autopilot
- Solid understanding of networking, authentication, and identity management principles
- Windows desktop and server configuration management skills
- A demonstrable interest in or experience with cybersecurity, whether through hands-on work, certifications, personal projects, or CTF participation
- Degree in Computer Science, Engineering, ICT, Cybersecurity, or a related field
- Ability to manage multiple projects spanning multiple teams to successful completion
- Strong communication skills, including the ability to effectively communicate technical information to a non-technical audience
Nice-to-Have
- Relevant security certifications such as SC-200, SC-300, AZ-500
- Experience with Microsoft Sentinel (SIEM) or similar security monitoring platforms
- Familiarity with zero-trust architecture and modern identity security models
- Experience with vulnerability scanning and remediation tools
- Knowledge of compliance frameworks (CIS, NIST, ISO 27001)
- Experience with Linux administration
Benefits:
- An opportunity to work in a high-tech, driven environment
- A base salary of EUR 70K to 100K (based on experience)
- Excellent variable pay and growth opportunities
- A relocation package when moving from abroad, including a relocation budget, flight coverage, house-finding service and expat support
- Fresh breakfast, lunch and dinner prepared by our in-house chef
- Social events and after-work drinks
- Reimbursement of travel costs
- Sponsored gym membership
- In-house game room (pool table, board games and console games)
