Systems Engineer

Mid-Level Systems Engineer

Join our mission to grow and transform the subscription economy by simplifying subscription service delivery. Infiterra enables IT distributors, Managed Service Providers (MSPs), and telcos to succeed in the subscription economy. Our subscription commerce platform automates and unifies subscription workflows - from quote to bill- driving operational efficiency, billing accuracy, and scalable growth.

We are hiring a mid-level Systems Engineer to take hands-on ownership of Infiterra's internal IT environment. The role combines Microsoft 365 and Entra ID administration, endpoint and systems management, employee IT support, access and security controls, and automation.

Your mission is to provide secure, reliable and increasingly automated corporate IT services to Infiterra employees. You will own day-to-day corporate IT operations while improving automation, identity and access management, endpoint management, employee lifecycle processes and service quality.

Moreover, you will have the opportunity to help evolve the function from largely operational support into a standardized, secure and increasingly automated internal IT service. This is not an L1 support position — support is part of the job, but the purpose of the role is to engineer and operate Internal IT as a scalable service.

Key Responsibilities

• Identity & Access Management
• Keep corporate identities in Entra ID / Azure AD accurate, well-organized and easy to audit.
• Structure users, groups and roles so they map cleanly to how the business actually works.
• Deliver secure, low-friction MFA and SSO, backed by Conditional Access policies that keep unauthorized access out.
• Grant access the moment someone needs it, and revoke it the moment they no longer do.
• Keep privileged accounts tightly controlled, with no lingering or unused elevated access.
• Catch and correct access drift through regular reviews, before it becomes a risk.
• Act as Security's reliable partner in shaping and validating access policy decisions.
• Employee Lifecycle
• Own the technical onboarding, role/access changes and offboarding process and run without gaps.
• Get every new employee productive from day one, with accounts, devices and applications ready before they start, and cut off access immediately once employment ends.
• Endpoint & Device Management
• Keep every company laptop on the security baseline and current on patches, without employees ever noticing the effort behind it.
• Keep the device fleet fully accounted for, replace ageing hardware before it becomes a problem, and stay audit-ready on compliance reporting.
• Corporate Systems & SaaS Administration
• Keep the internal Microsoft / Azure environment and core SaaS applications running reliably, with no unplanned downtime or configuration drift.
• Keep licensing spend, permissions and integrations accurate and well documented, so there's never confusion about who owns what.
• Internal Support & Service Management
• Give employees fast, dependable help when something breaks, and make sure they always know exactly where to turn.
• Meet SLAs consistently, so waiting on IT is never the reason work stalls.
• Grow a knowledge base that resolves issues faster over time, instead of solving them from memory each time.
• Fix recurring issues at the root, so ticket volume trends down instead of repeating.
• Security & Compliance Operations
• Keep access evidence, endpoint compliance, asset inventories and account lifecycle records ready to hand over for an ISO 27001 or SOC 2 audit.
• Run IT controls reliably day to day, giving Security confidence in the operational layer without having to manage it themselves.

Ideal Candidate Profile

• A Systems Engineer with hands-on Internal IT operations experience, comfortable across Microsoft 365, Azure and endpoint management.
• A structured problem solver who gets to the root cause instead of repeating the workaround.
• A clear communicator who can support colleagues of all technical levels.
• An ownership mindset: you take a process end to end and improve it as you go.
• Able to document decisions, processes and runbooks so the service does not depend on one person.
• Motivated by automation and standardization, and genuinely interested in employee IT and service delivery.

Requirements

• 3–6 years of experience in Internal IT and/or Systems Administration.
• Microsoft Entra ID administration.
• Microsoft 365 administration.
• Windows endpoint administration.
• Windows Server administration.
• PowerShell or equivalent automation.
• Basic networking: DNS, DHCP, VPN, TCP/IP and routing concepts.
• Security fundamentals: least privilege, patching, endpoint protection and access controls.
• IT asset and inventory management.
• IT troubleshooting and incident management.
• Documentation and runbook discipline.

Nice to Have

Experience with the following technologies, tools and applications is considered a strong advantage:

• Microsoft Intune.
• Conditional Access.
• Microsoft Defender ecosystem.
• Apple / macOS device management.
• Azure administration.
• Jira, Confluence and Jira Service Management.
• Experience working in an ISO 27001 or SOC 2 environment.

Benefits

• Fully remote work.
• Work-from-anywhere scheme (travel and work).
• Flexible working hours.
• Learning & development budget.
• Collaborative, tech-driven team culture with international diversity.

If you feel you're a great fit, please apply! We'd love to hear from you! All applications will be treated confidentially. Due to the high volume of applications, only shortlisted candidates will be contacted for an interview.

As part of our commitment to diversity in the workforce, Infiterra is dedicated to Equal Employment Opportunity, ensuring that all individuals are treated with respect and consideration without regard to race, color, national origin, ethnicity, gender, disability, sexual orientation, gender identity, or religion.