IT Systems Administrator

PAVE Space SA.; Villeneuve (VD); On-site; CHF 90,000 - 140,000; Full time

Job summary

PAVE Space in Villeneuve (VD) is building LYOBA and seeks an IT Operations and Support professional. You will own onboarding and offboarding, provide day-to-day support across sites, manage access, and implement robust monitoring, patching, and backups.

You will work with containerised services and SIEM-related tooling to keep systems secure and available. You will be hands-on with Entra ID, Intune, and Microsoft 365, and bring Linux and Docker expertise.

Qualifications

• Hands-on admin of Entra ID, Intune, and Microsoft 365.
• Comfortable on Linux and containerised services (Docker).
• Experience with centralized logging/monitoring (Wazuh, Graylog, Sentinel).
• Keep systems current with patches and updates.
• Strong networking troubleshooting skills.
• Ability to script repetitive tasks.
• Bias to action and ownership of tasks.

Responsibilities

• Own onboarding and offboarding: accounts, devices, access, equipment.
• Provide day-to-day IT support across Villeneuve (VD) and test site in Chavalon.
• Manage access rights and offboarding cleanly.
• Monitor and alert to surface issues early.
• Patch and update cadence for endpoints, servers, services.
• Keep containerised services reproducible, scanned, and backed up.
• Ensure backups are verifiable and restorable.
• Improve internal tools used by the team.

Skills

Entra ID

Intune

Microsoft 365

Linux

Docker

Logging / Monitoring

Scripting

Networking

CI / CD

Communication

Tools

Wazuh

Graylog

Microsoft Sentinel

Job description

PAVE Space is building LYOBA, a heavy kick stage moving over 4-tonne payloads from LEO to high-energy orbits in under 24 hours. Everyone here depends on IT that just works. Today one person carries all of it. That's what you'll take on.

We're 50 today and we'll be 80 by the end of the year. IT has been carried end to end by one person: the day-to-day support, the infrastructure under it, and keeping it secure and reliable. That doesn't scale. You're joining at the start of that change, not maintaining the end of it. We need someone to own operations and support, and to build and deploy what's missing rather than wait for someone else to get to it.

You will own

Onboarding and offboarding, start to finish: accounts, devices, access, and equipment. People productive on day one, fully offboarded the day they leave

Day-to-day support across both sites: fast, patient help that unblocks people and leaves them a little more self-sufficient each time

Access management: the right people with the right access, and nothing lingering when someone changes role or leaves

Monitoring and alerting, so issues surface early instead of landing as a user complaint

Patching and updates on a real cadence: endpoints, servers, and the services underneath them

Our containerised services: keeping them reproducible, scanned, and backed up, not just running

Backups you can actually restore from: watching the jobs, and proving the restores work

Improving the internal tools the team relies on, not just keeping them running

What we are looking for

Hands-on experience administering Entra ID, Intune, and Microsoft 365. This is the core of the role, so you should know it well, not plan to learn it here

Comfortable on Linux and with containerised services (Docker). You can run and harden them, not just click through a GUI

Experience with centralised logging and monitoring (Wazuh, Graylog, Sentinel, or similar), or the drive to set it up well

You keep things current: updates and patches on a real cadence, without it turning into a fire drill

Networking fundamentals you can troubleshoot without hand-holding

You script to avoid doing the same thing twice

A bias to action. You spot what's missing and go build or deploy it, comfortable making the call without waiting for permission

You treat access and offboarding with the care they deserve. In a growing team, that discipline matters

Clear communication. You can calm a stressed engineer and explain the fix

Nice to have: SIEM tuning and log correlation; container image scanning and infrastructure-as-code; hybrid Active Directory and identity sync; source control and CI; exposure to industrial or OT environments; experience in a regulated or export-controlled setting, French language skills

You will fit if

You care about the person on the other end of the request. It isn't fixed until they're unblocked and less likely to hit the same wall again.

You explain things without ever making someone feel slow for asking, and you leave people more capable than you found them.

You see IT as a service the whole company leans on. You want people to trust it, not dread it.

You spot what's missing and go build or deploy it, instead of waiting for the task to be handed to you.

You take the quiet work seriously: access, offboarding, and the good habits that keep a growing team running smoothly.

The job is fully on-site across Villeneuve (VD) and our test site in Chavalon, twenty minutes away. IT here is being built as the company scales. You'll shape how it runs, not inherit a finished playbook. This is hands-on and early. If you want a mature IT org with a queue someone else fills, this is the wrong seat. If you want to build and run IT for the most ambitious space programme in Switzerland, while it doubles around you, it's the right one.