IT Systems Administrator

PAVE Space SA; Villeneuve (VD); Remote; CHF 90,000 - 140,000; Full time

Job summary

PAVE Space SA is building LYOBA and is expanding its IT team. You will own day-to-day operations, onboarding/offboarding, access management, and monitoring across Villeneuve (VD) and the test site in Chavalon.

This is a hands-on, early-stage role where you build the tools and processes the company scales on. You’ll work on Linux-based, containerised services, ensure secure access, automate tasks, and drive reliability across the space programme.

Qualifications

• Hands-on experience with Entra ID, Intune and Microsoft 365 is required.
• Comfort with Linux and containerised services (Docker).
• Experience with centralized logging and monitoring, or the drive to set it up well.
• You keep systems current with regular updates and patches.
• Solid networking fundamentals and scripting ability to automate tasks.
• Bias to action and proactive in building or deploying new tools.
• Clear communication to calm engineers and explain fixes.
• Nice to have: French language skills and IF/OT exposure.

Responsibilities

• Onboarding and offboarding from start to finish: accounts, devices, access, and equipment.
• Day-to-day support across sites to unblock users and improve independence.
• Access management ensuring correct permissions and timely offboarding.
• Monitoring and alerting to surface issues early.
• Patching and cadence management for endpoints and services.
• Maintain containerised services to be reproducible and secure.
• Backups you can actually restore from with proven restores.
• Improve internal tools used by the team to run IT smoothly.

Skills

On-call support

IT operations

Automation mindset

Tools

Entra ID

Intune

Microsoft 365

Linux

Docker

Logging/Monitoring

Scripting (Shell/PowerShell)

Networking basics

Job description

PAVE Space is building LYOBA, a heavy kick stage moving over 4-tonne payloads from LEO to high-energy orbits in under 24 hours. Everyone here depends on IT that just works. Today one person carries all of it. That's what you'll take on.

We're 50 today and we'll be 80 by the end of the year. IT has been carried end to end by one person: the day-to-day support, the infrastructure under it, and keeping it secure and reliable. That doesn't scale. You're joining at the start of that change, not maintaining the end of it. We need someone to own operations and support, and to build and deploy what's missing rather than wait for someone else to get to it.

You will own

Onboarding and offboarding, start to finish: accounts, devices, access, and equipment. People productive on day one, fully offboarded the day they leave

Day-to-day support across both sites: fast, patient help that unblocks people and leaves them a little more self-sufficient each time

Access management: the right people with the right access, and nothing lingering when someone changes role or leaves

Monitoring and alerting, so issues surface early instead of landing as a user complaint

Patching and updates on a real cadence: endpoints, servers, and the services underneath them

Our containerised services: keeping them reproducible, scanned, and backed up, not just running

Backups you can actually restore from: watching the jobs, and proving the restores work

Improving the internal tools the team relies on, not just keeping them running

What we are looking for

Hands-on experience administering Entra ID, Intune, and Microsoft 365. This is the core of the role, so you should know it well, not plan to learn it here

Comfortable on Linux and with containerised services (Docker). You can run and harden them, not just click through a GUI

Experience with centralised logging and monitoring (Wazuh, Graylog, Sentinel, or similar), or the drive to set it up well

You keep things current: updates and patches on a real cadence, without it turning into a fire drill

Networking fundamentals you can troubleshoot without hand-holding

You script to avoid doing the same thing twice

A bias to action. You spot what's missing and go build or deploy it, comfortable making the call without waiting for permission

You treat access and offboarding with the care they deserve. In a growing team, that discipline matters

Clear communication. You can calm a stressed engineer and explain the fix

Nice to have: SIEM tuning and log correlation; container image scanning and infrastructure-as-code; hybrid Active Directory and identity sync; source control and CI; exposure to industrial or OT environments; experience in a regulated or export-controlled setting, French language skills

You will fit if

You care about the person on the other end of the request. It isn't fixed until they're unblocked and less likely to hit the same wall again.

You explain things without ever making someone feel slow for asking, and you leave people more capable than you found them.

You see IT as a service the whole company leans on. You want people to trust it, not dread it.

You spot what's missing and go build or deploy it, instead of waiting for the task to be handed to you.

You take the quiet work seriously: access, offboarding, and the good habits that keep a growing team running smoothly.

The job is fully on-site across Villeneuve (VD) and our test site in Chavalon, twenty minutes away. IT here is being built as the company scales. You'll shape how it runs, not inherit a finished playbook. This is hands-on and early. If you want a mature IT org with a queue someone else fills, this is the wrong seat. If you want to build and run IT for the most ambitious space programme in Switzerland, while it doubles around you, it's the right one.

We are building to ship, grounded on real hardware, real funding, real milestones. Apply to contribute, surrounded by people as sharp as you are. And if this isn't you but you know that person, send them our way.