IT Systems & Security Engineer

ppMedimaps Group is the world’s leading company designing and providing medical imaging software for bone health assessment for improved fracture risk assessment. We are a rapidly growing company developing and commercializing medical imaging software powered by AI. Headquartered in Geneva, Switzerland, with offices in the US, Denmark and France, we currently total 80+ people, and we are still growing. /p h3Position: IT Systems Security Engineer /h3 h3Location: Switzerland – regular on-site presence required /h3 h3Start Date: ASAP, or as agreed /h3 h3Contract: Full time employment /h3 pWe are looking for a hands-on IT Systems Security Engineer who combines strong infrastructure expertise with a genuine security mindset. You will work across cloud, on-premise infrastructure, networking and cybersecurity in a role where autonomy, problem-solving, documentation and technical ownership are essential. /p h3About the Role /h3 pReporting directly to the IT Engineer Systems Administration Manager, you will be responsible for the implementation, maintenance, configuration and reliable operation of Medimaps’ corporate and infrastructure IT environment. /p pYour scope will cover Microsoft Azure, Microsoft 365, on-premise virtualisation, networking, servers, end-user computing and security operations. /p pSecurity is at the heart of the role. You will help ensure our systems are secure by default while managing day-to-day security activities including monitoring, vulnerability management, patching, hardening, access control and incident follow-up. /p pAs part of a small and highly collaborative IT team, you will have significant hands‑on responsibility and autonomy. Strong written documentation is essential: every system you operate should be secure, reliable and documented well enough that another team member can operate it independently. /p h3What You’ll Do /h3 ul liInstall, configure, update and upgrade servers, virtual machines, network equipment, workstations and software. /li liOperate and maintain the Microsoft Azure environment, including IaaS and PaaS resources, networking, subscriptions, monitoring, backup, tagging and resource organisation. /li liAdminister Microsoft 365 and Microsoft Entra ID, including Exchange Online, SharePoint, OneDrive, Teams, Intune, licensing, groups and conditional access. /li liOperate and maintain on‑premise virtualisation environments, including VMware ESXi/vCenter and Proxmox VE. /li liManage the network environment, including firewalls, VLANs, routing, VPN, DNS, DHCP, reverse proxies, TLS certificates, WiFi and network segmentation. /li liAdminister Windows Server and Linux systems, storage, capacity and performance, including SAN, NAS and database hosting. /li liAutomate recurring administration activities using PowerShell and shell scripting, with versioned and documented scripts. /li liRun day‑to‑day security operations, including security monitoring, SIEM, vulnerability management, patching, hardening, endpoint protection and privileged access management. /li liHandle security incidents through containment, investigation, documentation and lessons learned, and contribute to cyber security awareness across the organisation. /li liManage backup and recovery operations, perform documented restore tests and contribute to disaster recovery and business continuity planning. /li liProvide 1st, 2nd and 3rd level IT support to internal colleagues and manage incidents and requests through the ticketing system. /li liMaintain clear, structured technical documentation, runbooks, inventories, network diagrams, access records and technical specifications. /li liParticipate in IT and RD projects from design and deployment through to operation and support. /li liContribute to Medimaps’ security and compliance roadmap, including CIS Controls and Benchmarks, ISO 27001, SOC 2 Type II, NIS2-related expectations, GDPR and Swiss data protection requirements. /li /ul h3What We’re Looking For /h3 pplease ensure you have all the ESSENTIAL Skills before applying /p h3Mandatory Technical Skills /h3 ul liDegree in Engineering, Computer Science, Communication Systems, Computer Engineering, Telecommunications or a related discipline; Master’s degree is a plus. /li liAt least 2–4 years of hands‑on experience in enterprise IT infrastructure, covering servers, virtualisation, networking, cloud environments and user/account management, with demonstrated involvement in IT security. /li liStrong hands‑on knowledge of Microsoft Azure, including IaaS, networking, Entra ID, resource management, monitoring and backup. /li liExperience administering Microsoft 365, including Exchange Online, SharePoint/OneDrive, Teams, Intune and Microsoft Defender. /li liVirtualization experience, particularly VMware ESXi and vCenter, including clusters, high availability, VM migration, snapshots and templates. /li liExperience administering both Windows Server and Linux environments, including hybrid identity and directory services. /li liStrong networking knowledge, including firewalls, VLANs, segmentation, routing, VPN, DNS, DHCP, reverse proxies, DMZ and trust‑zone principles. /li liExperience with PowerShell and shell scripting for system administration and automation. /li liGood understanding of security operations, including SIEM concepts, EDR, vulnerability management, patch management and hardening baselines. /li liUnderstanding of backup and recovery principles, including restore testing, RTO, RPO and recovery order. /li liFamiliarity with CIS Controls and CIS Benchmarks, with awareness of ISO 27001, SOC 2 Type II and NIS2‑related requirements. /li liStrong documentation and ticketing practice using tools such as Jira, Confluence, GLPI or equivalent, together with asset and configuration management disciplines. /li /ul h3Soft Skills /h3 ul liA genuine security‑first mindset, with the instinct to assess risk, apply least privilege and leave systems more secure than you found them. /li liAutonomous and proactive, while able to collaborate effectively within a small team and across the wider organisation. /li liStructured and methodical, with a strong habit of documenting systems, decisions and technical work as you go. /li liStrong analytical and problem‑solving skills, with the ability to understand business requirements and propose practical, proportionate technical solutions. /li liAble to communicate technical concepts clearly to both technical and non‑technical colleagues, customers and external partners. /li liUser and solutions oriented, with a strong focus on quality and results. /li liFlexible and agile, with the ability to thrive in a dynamic, innovative and fast‑growing organisation. /li liCurious and committed to continuous learning, with a genuine passion for IT infrastructure and cybersecurity. /li liEthical, honest and respectful in all personal and professional interactions. /li /ul h3Languages /h3 pFluent English and business‑level French are required. Any other language is a plus. /p h3What can you expect from us? /h3 pAs we work to develop innovative patient solutions, we also work hard to support our teammates’ professional development, personal growth and well‑being. You will join an international, multi‑cultural and socially responsible company with meaningful corporate values, an inspiring mission and a talented, professional and friendly team. /p ul liA meaningful role in a fast‑growing international MedTech company. /li liA collaborative environment where autonomy, ownership and continuous learning are encouraged. /li liThe opportunity to work across a broad and modern IT estate spanning cloud, infrastructure, networking and cybersecurity. /li liA role with real impact on the reliability, resilience and security of the systems supporting our business and our mission. /li liCompetitive compensation and benefits in line with the Swiss employment framework and the responsibilities of the role. /li /ul h3Data Privacy /h3 pBy submitting your application, you agree to share your personal data with the Medimaps Group solely for the purpose of recruitment and employment‑related evaluations. Your information will be handled in accordance with applicable data protection laws and will only be used for assessing your suitability for this and potential future positions within the Company. All personal data provided will remain confidential and will not be shared with third parties without your prior and explicit consent. You have the right to withdraw your consent or request access to your data at any stage of the recruitment process. /p /p #J-18808-Ljbffr