Platform Engineer

Tenacy; Lyon; Híbrido; EUR 45 000 - 60 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Télétravail hybride possible

RTT 10 à 13 jours

Mutuelle 70% prise en charge

Carte-repas Swile

Panier de fruits

Forfait mobilités durables

Afterworks et team buildings

Resumo da oferta

Tenacy recherche un administrateur système et infrastructure pour prendre en charge l’IDSi, le parc informatique et l’automatisation des tâches répétitives. Vous gérerez Azure Entra ID, Intune et Microsoft 365, administrerez des serveurs Linux et assurerez le bon fonctionnement du réseau, des VPN et de la sécurité.

Vous contribuerez à l’automatisation via Claude et participerez au déploiement et à la supervision des pipelines, en mode hybride avec bureaux à Lyon.

Qualificações

• Excellente maîtrise d’Azure Entra ID, Intune et Microsoft 365 pour l’administration des comptes et des accès.
• Administration de serveurs Linux en production: sécurité, mises à jour et dépannage.
• Conception et gestion du réseau, pare-feu et accès VPN pour utilisateurs et serveurs.
• Monitore et alerte des systèmes: fiabilité et réactivité des équipes.
• Automatisation avec Claude et scripts documentés et révisables.

Responsabilidades

• Administre Entra ID, Microsoft 365 et Intune: utilisateurs, groupes, licences et accès conditionnel.
• Gère le parc laptops (Mac/Windows/Linux): achats, enrollment, mises à jour et réparations.
• Supervise le système de salle de réunion et les équipements IT.
• Soutien aux employés sur les applications, diagnose et documente les correctifs.
• Conduit onboarding/offboarding avec traçabilité et audit ISO 27001.

Conhecimentos

Azure Entra ID

Intune

Microsoft 365 administration

Linux administration

Networking

Firewalls

VPN

Monitoring and alerting

Scripting (PowerShell/Bash/Python)

Claude automation

Ferramentas

Terraform

Ansible

Docker

Descrição da oferta de emprego

Across both halves, you automate. Every task you do twice should become a script. You use Claude to write those scripts, and you know how to check what it produces before it touches a laptop, an account or a server.

What is solid. The platform is deployed with Ansible, every instance follows the same model, and workstations are already managed centrally: nobody is local administrator of their own machine. Security and compliance are part of how the company works, because our customers are CISOs and they look closely.

What remains to build. There is no single, up-to-date view of which tools we use, who has access to what, and who owns each tool: building it is one of your first deliverables. Onboarding and offboarding exist as checklists and workflows, not yet as automation. Monitoring tools are in place, and making sure the right alerts reach the right person is part of your job.

Internal IT (about 50%)

• Administer Microsoft Entra ID, Microsoft 365 and Intune: users, groups, licences, conditional access, device policies.

• Manage the laptop fleet (Mac, Windows, Linux): purchase, enrollment, updates, repair, return.

• Manage our meeting room system

• Buy and manage office tech equipment, within a budget.

• Support employees on their applications: diagnose, fix, and document the fix so it does not come back.

• Own the technical side of onboarding and offboarding: accounts in every tool on day one, every access removed on the last day, with a trace. These workflows are audited for our ISO 27001 certification.

• Run the internal support tool, and keep the inventory of tools, accesses and owners up to date.

Platform (about 50%)

• Manage the customer instances: provisioning, configuration, keeping them consistent with each other, decommissioning.

• Run vulnerability scans on a schedule, across Linux servers, containers and dependencies, and across the Windows and Mac workstations.

• Keep everything patched: track the CVEs the scans and advisories report, decide what is urgent, and roll the patches out without breaking the service or the employees' day.

• Keep them up: monitoring, backups checked, incidents handled.

• Network, firewalls, VPN and access to production: who can reach what, how, and with what trace.

• Contribute to the infrastructure code (Terraform, Ansible, Docker) and to the deployment pipeline.

• Make monitoring useful: an alert that fires has a recipient and an action.

• Take part in a small on-call rotation, being defined with the team.

Everywhere

• Automate. Account creation, laptop setup, access reviews, vulnerability scans, patch rollouts, routine checks on the servers: if it is repeated, it becomes a script, and the script is reviewed, versioned and documented.

• Télétravail hybride possible : des bureaux à Lyon, à un arrêt de métro de la place Bellecour

• 10 à 13 jours de RTT par an

• Mutuelle prise en charge à 70 %

• Carte-repas Swile : 9 € par jour, financée à 60 % par l’entreprise

• Panier de fruits hebdomadaire offert

• Forfait mobilités durables : 40 € par mois

• Afterworks, séminaires et team buildings

Must-haveTake satisfaction helping your colleagues and setting them up for success.

You know how important a smooth IT set up is for the workplace experience and productivity.Strong knowledge in Azure: Entra ID (Azure AD), conditional access, Intune and Microsoft 365 administration. You have run a company's tenant, not only used it.Expert in Linux: you have administered production Linux servers over time, kept them up, secured and patched them, and debugged them when they failed.Strong knowledge in networking, firewalls and VPN: you have designed and run firewall rules and VPN access for real users and servers, and you can explain who could reach what, and why.Expert in monitoring: you have built monitoring and alerting that people actually relied on, and you can explain what you chose to alert on and what you chose not to.You automate with Claude: you have used it to write scripts that run in production or on real users' accounts and machines, and you can show what you checked before running them.

What counts as much

A security mindset: least privilege, traceability, access reviews.Vulnerability management in practice: you have run vulnerability scans on Linux servers and Windows workstations, prioritised the CVEs they found, and patched on a schedule, not only when something broke.Scripting in PowerShell, Bash or Python.You explain technical things to non-technical colleagues without making them feel slow.

Not required

Deep experience with our exact stack (Terraform, Ansible, Docker Swarm): it can be learned.A cyber or compliance background: the domain can be learned too. Having lived through an ISO 27001 audit is a real plus.