Description
Job Overview
As a (Senior) Systems Engineer – IT Architect at Helsing, you will define and build the architecture of the IT estate supporting Helsing's European offices and engineering teams. You will work across various domains, including endpoint, identity, network, on-premises, and cloud, to ensure security and compliance.
Key Responsibilities
- Architect and build end-to-end systems across corporate, development, and regulated environments, connecting Microsoft 365, Azure, and on-premises infrastructure securely.
- Design and implement identity, access, and device management (Entra ID, Conditional Access, MDM) enforcing Zero Trust on macOS, Windows, and Linux endpoints.
- Define network and boundary protection for European sites and remote work, including segmentation, VPNs, and host- and network-based controls.
- Set standards and reference builds for on-premises compute on Linux, virtualization, and Kubernetes.
- Automate with Infrastructure as Code (Terraform, Ansible, Python, PowerShell) for reproducibility and auditability.
- Work with Security, Compliance, and external auditors to achieve accreditation-ready architectures.
- Make key architecture decisions, document trade-offs, and review designs with IT Engineers and the IT Support team.
Requirements
- Proven experience designing and building enterprise IT systems with security and compliance built-in, ideally in defence, government, or regulated sectors.
- Hands-on experience with hybrid environments: Linux on-premises, Kubernetes, macOS, Windows, and Azure, Microsoft 365, or AWS.
- Experience with identity, network segmentation, and Zero Trust architectures, automated with Infrastructure as Code.
- Ability to turn ambiguous regulatory and cross-border requirements into clear roadmaps.
- Fluent communication in German and English (C1).
Nice to Have
- Experience with the Microsoft 365 and Azure security stack (Entra ID, Intune, Defender, Purview).
- Built infrastructure feeding SIEM platforms and automated response workflows.
- Experience taking systems through formal national or defence accreditation.
- Scaled IT systems across several countries in a fast-growing engineering organization.
Benefits
- Competitive salary and VSOP options.
- Relocation support: up to €2,500 and 4 weeks temporary accommodation.
- Learning: €500/£450 yearly allowance.
- Health & wellness: gym membership and mental health support (Nilo.health).
- Social: regular company events and monthly social allowances.
- Enhanced parental leave: 22 weeks fully paid for primary caregivers & 6 weeks for secondary caregivers.
- Family support: 5 days of paid family emergency leave, 100% remote work option during pregnancy and phased return to work.