Systems Engineer – IT Architect

Helsing; United States; Hybrid; USD 120,000 - 190,000; Full time

Benefits offered by this job

Relocation support

Annual learning allowance

Health and wellness

Company events

Parental leave

Job summary

Helsing — оборонная IT-компания, реализующая задачи по проектированию и развертыванию гибридной IT-архитектуры для европейских офисов. Роль предусматривает работу с Entra ID, Azure, Kubernetes и безопасной инфраструктурой, а также взаимодействие с аудиторами в контексте строгих регуляторных требований.

Ищем миссионерски ориентированных специалистов, владение немецким и английским языками приветствуется. Возможна релокация, достойная система вознаграждений и удалённая часть проекта.

Qualifications

• Имеется подтверждённый опыт проектирования и внедрения Enterprise IT-систем с учётом безопасности и комплаенса, желательно в оборонной/гос. секторе.
• Опыт работы в гибридных окружениях: Linux on-premises, Kubernetes, macOS, Windows, Azure и AWS.
• Опыт построения архитектур идентификации, сегментации сети и Zero Trust, автоматизированных с помощью инфраструктуры как кода.
• Умение превращать регуляторные требования в понятные дорожные карты и объяснять trade-offs как техничеcким, так и нетехническим коллегам.
• Готовность к сотрудничеству через границы и поддержке демократических ценностей.

Responsibilities

• Проектировать и развивать сквозные IT-архитектуры корпоративной инфраструктуры с учётом безопасности и соответствия.
• Разрабатывать и внедрять идентификацию, доступ и управление устройствами (Entra ID, Conditional Access, MDM) с переходом на Zero Trust на macOS, Windows и Linux.
• Определять сетевые границы и защиту для европейских офисов и удалённой работы, включая сегментацию и VPN.
• Устанавливать стандарты и эталоны для вычислений на локальном оборудовании, виртуализации и Kubernetes.
• Автоматизировать инфраструктуру как код (Terraform, Ansible, Python, PowerShell) для воспроизводимости и аудита.
• Согласовывать архитектурные решения с командами безопасности и внешними аудиторами по ISO 27001, NIS2, BSI IT-Grundschutz, UK Secure by Design.

Skills

Architectural design

Zero Trust

Cross-border collaboration

Русский/английский общение

Tools

Entra ID

Intune

Defender

Purview

Azure

Microsoft 365

Job description

Описание:

Helsing is a defence AI company. Our mission is to protect our democracies. We aim to achieve technological leadership, so that open societies can continue to make sovereign decisions and control their ethical standards. As democracies, we believe we have a special responsibility to be thoughtful about the development and deployment of powerful technologies like AI. We take this responsibility seriously. We are an ambitious and committed team of engineers, AI specialists and customer-facing programme managers. We are looking for mission-driven people to join our European teams – and apply their skills to solve the most complex and impactful problems. We embrace an open and transparent culture that welcomes healthy debates on the use of technology in defence, its benefits, and its ethical implications. As a (Senior) Systems Engineer – IT Architect, you will define the architecture of the IT estate that supports Helsing's European offices and engineering teams, and build its key parts yourself. Across endpoint, identity, network, on-premises and cloud, you will work with Security, Engineering and IT Operations to turn operational and compliance requirements into clear roadmaps. You will prove your designs with reference implementations, then hand them to the IT Engineers and IT Support team to run. Working in German and English with colleagues, auditors and authorities, you will help Helsing scale across jurisdictions without weakening security or slowing engineers down.

Задачи:

Architect and build end-to-end systems across corporate, development and regulated environments, connecting Microsoft 365, Azure and on-premises infrastructure securely

Design and implement identity, access and device management (Entra ID, Conditional Access, MDM) that enforces Zero Trust on macOS, Windows and Linux endpoints

Define network and boundary protection for European sites and remote work, including segmentation, VPNs, and host- and network-based controls

Set standards and reference builds for on-premises compute on Linux, virtualisation and Kubernetes

Automate with Infrastructure as Code (Terraform, Ansible, Python, PowerShell) so every system is reproducible and auditable

Work with Security, Compliance and external auditors to turn ISO 27001, NIS2, BSI IT-Grundschutz and UK Secure by Design into accreditation-ready architectures

Make key architecture decisions, document the trade-offs, and review designs with IT Engineers and the IT Support team

Требования:

Have proven experience designing and building enterprise IT systems with security and compliance built in, ideally in defence, government or other regulated sectors

Have hands-on experience with hybrid environments: Linux on-premises, Kubernetes, macOS, Windows, and Azure, Microsoft 365 or AWS

Have built identity, network segmentation and Zero Trust architectures, automated with Infrastructure as Code

Turn ambiguous regulatory and cross-border requirements into clear roadmaps, and explain trade-offs to technical and non-technical colleagues

Collaborate openly across teams and share our commitment to protecting democratic societies

Communicate fluently in German and English (C1) with internal and external stakeholders

Note: We operate in an industry where women, as well as other minority groups, are systematically under-represented. We encourage you to apply even if you don’t meet all the listed qualifications; ability and impact cannot be summarised in a few bullet points.

Have worked across the Microsoft 365 and Azure security stack (Entra ID, Intune, Defender, Purview)

Have built infrastructure that feeds SIEM platforms and automated response workflows

Have taken systems through formal national or defence accreditation

Have scaled IT systems across several countries in a fast-growing engineering organisation

Join Helsing and work with world-leading experts in their fields

Условия:

• Competitive salary and VSOP options
• Relocation support: up to €2,500 and 4 weeks temporary accommodation
• Learning: €500/£450 yearly allowance
• Health & wellness: gym membership and mental health support (Nilo.health)
• Social: regularly company events and monthly social allowances
• Enhanced parental leave: 22 weeks fully paid for primary caregivers & 6 weeks for secondary caregivers.
• Family support: 5 days of paid family emergency leave, 100% remote work option during pregnancy and phased return to work

These are the core benefits across all locations, there may be additional benefits in certain locations.

Helsing is an equal opportunities employer.

We are committed to equal employment opportunity regardless of race, religion, sexual orientation, age, marital status, disability or gender identity.

Please do not submit personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, data concerning your health, or data concerning your sexual orientation.

Helsing's Candidate Privacy and Confidentiality Regime can be found here.