System Engineer

Forfirm; Ticino; On-site; CHF 90,000 - 120,000; Full time

Job summary

Forfirm is seeking a System Engineer to join its IT team as deputy to the infrastructure lead. You will share responsibility for the datacenter, DR site, and IT services for Forfirm and client companies.

You will operate and develop the virtualization/storage platform, administer Windows Server/AD/M365, manage Intune across devices, execute DR testing, and support security operations. You will also maintain networks, monitor with Zabbix, and automate tasks.

Qualifications

• IT education or equivalent practical experience with at least 4 years in System Engineer/Administrator roles.
• Solid knowledge of Windows Server, Active Directory and Microsoft 365 / Entra ID.
• Hands-on experience with Intune and Windows client lifecycle; macOS/iOS management is a plus.
• Experience with virtualization (Proxmox or VMware) and Linux servers (Debian/Ubuntu).
• Good understanding of networking, firewalls and VPN.
• Scripting skills in PowerShell and/or Bash/Python.
• Interest in IT security with CIS benchmarks or regulated environments is a plus.
• Experience with Ansible, Docker, Zabbix or SIEM is a strong plus.
• Structured, independent and reliable; hands-on attitude; good Italian and English; German is a plus.

Responsibilities

• Operate and develop our virtualization and storage platform (Proxmox VE with Ceph, TrueNAS/ZFS)
• Administer Windows Server, Active Directory, DNS/DHCP and Microsoft 365 / Entra ID (Conditional Access, MFA, Exchange Online)
• Manage endpoints with Microsoft Intune for Windows, macOS, iOS and Android (Forfirm and client companies)
• Run and test backup, replication and restore procedures, including Disaster Recovery site
• Support security operations: SIEM (Wazuh, Microsoft Sentinel), endpoint protection (ESET), vulnerability scans (Nessus), CIS-based hardening
• Maintain network and perimeter components (FortiGate, pfSense, Sophos, UniFi, VPN)
• Monitor systems with Zabbix and handle alerts/incidents, including root-cause analysis
• Automate recurring tasks with Ansible, PowerShell, Bash or Python
• Operate containerized services (Docker, Traefik) with configurations in GitHub Enterprise
• Handle 2nd/3rd level support and collaborate with users and providers
• Document systems and procedures clearly for repeatable operations

Skills

Windows Server

Active Directory

Intune

Proxmox

VMware

Linux servers

Scripting PowerShell/Bash

Security fundamentals

Git/CI

Docker

Education

EFZ/HF/FH IT education or equivalent

Tools

Proxmox VE

Ceph

TrueNAS

Zabbix

FortiGate

pfSense

Sophos

UniFi

Ansible

GitHub Enterprise

Docker

Traefik

Job description

About the role

We are looking for a System Engineer to join our IT team and act as deputy for our infrastructure lead. You will share responsibility for our own datacenter, our DR site and the IT services we provide to Forfirm and to several client companies. You will be the second point of reference for all infrastructure topics, so that knowledge and responsibility are always covered.

Your responsibilities

• Operate and develop our virtualization and storage platform (Proxmox VE with Ceph, TrueNAS/ZFS)
• Administer Windows Server, Active Directory, DNS/DHCP and Microsoft 365 / Entra ID (Conditional Access, MFA, Exchange Online)
• Manage endpoints with Microsoft Intune for Windows, macOS, iOS and Android, for Forfirm and for client companies (compliance policies, Apple Business Manager, Automated Device Enrollment)
• Run and test backup, replication and restore procedures, including our Disaster Recovery site
• Support security operations: SIEM (Wazuh, Microsoft Sentinel), endpoint protection (ESET), vulnerability scans (Nessus), CIS-based server and client hardening
• Maintain network and perimeter components (FortiGate, pfSense, Sophos, UniFi, VPN)
• Monitor systems with Zabbix and handle alerts and incidents, including root-cause analysis
• Automate recurring tasks with Ansible, PowerShell, Bash or Python
• Operate containerized services (Docker, Traefik) with configurations versioned in GitHub Enterprise
• Handle 2nd and 3rd-level support and work with users and external providers
• Document systems and procedures clearly, so that others can follow them

Your profile

• IT education (EFZ, HF/FH) or equivalent practical experience
• At least 4 years of experience as a System Engineer or System Administrator
• Solid knowledge of Windows Server, Active Directory and Microsoft 365 / Entra ID
• Hands-on experience with Intune and the Windows client lifecycle; macOS/iOS management is an asset
• Experience with virtualization (Proxmox or VMware) and Linux servers (Debian/Ubuntu)
• Good understanding of networking, firewalls and VPN
• Scripting skills in PowerShell and/or Bash/Python
• Interest in IT security; experience with CIS benchmarks or regulated environments is an asset
• Experience with Ansible, Docker, Zabbix or a SIEM is a strong plus
• Structured, independent and reliable way of working, with a hands-on attitude
• Very good Italian and good English; German is an asset

What we offer

• Broad responsibility across datacenter, cloud, endpoints and security
• A modern, largely automated infrastructure that you help to shape
• Variety: internal IT and projects for different client companies
• A small team with short decision paths and direct contact with management
• Workplace in Lugano