About this role
Key Responsibilities IT Support & Governance • Run day-to-day IT hands-on: user support, onboarding/offboarding, hardware, software and the productivity stack. • Manage the IT budget, licensing, suppliers and the approved-software catalogue. Infrastructure & Systems • Install, configure and maintain on-premise servers and infrastructure (compute, storage, virtualisation, backups) for corporate and lab needs, with hardening and secure remote management. • Build and operate the corporate and lab networks: segmentation, firewalls, Wi-Fi and secure remote access (VPN or zero-trust). • Manage the endpoint fleet, primarily Windows (with the occasional Linux host) Applications & Platforms • Lead the migration to and administration of the Microsoft 365 stack (Teams, Exchange Online, SharePoint/OneDrive, Entra ID, Intune), with secure configuration.. • Administer the source-code and DevOps platform (GitHub Enterprise or Azure DevOps): access control, repository and pipeline security, secrets management and SSO integration, in coordination with the engineering teams. • Administer business applications and line-of-business solutions (CRM/ERP such as Odoo, and others): user access, configuration, integrations, updates and vendor management. Security & Compliance • Operate identity and access: SSO, MFA and joiner-mover-leaver workflows. • Put in place and maintain practical security policies and controls, working towards an ISMS aligned to ISO/IEC 27001. • Run vulnerability and patch management with clear priorities and remediation. • Lead incident response: detect, contain, resolve and learn. • Support compliance with applicable EU rules (GDPR, NIS2) and customer security requirements; handle security questionnaires and audits. Qualifications & Experience • Degree in computer science, IT, information security, or equivalent hands-on experience. • 9+ years in hands-on IT and/or information security, ideally as a generalist covering both. • Practical experience across network security, endpoint management (MDM/EDR/encryption) and identity (SSO/MFA). • Experience setting up or operating security controls or an ISMS (ISO/IEC 27001 an advantage). • Comfortable as the only IT person: self-directed, pragmatic and genuinely hands-on. • Clear communicator, patient with non-technical users. • Fluent in English and French. • Assets: a recognised certification (e.g. CISSP, CISM, ISO 27001, ITIL); experience in defence, aerospace or critical-infrastructure environments; familiarity with Luxembourg's regulatory landscape (CNPD, ILR, national CERTs) and NIS2.