System Administrator (mfd) | Legal AI Tech Scale-Up |Hybrid

At Noxtua were building Europes sovereign Legal AI and the people building it need internal IT that just works: secure identities reliable devices and smooth access to the tools they use every day. Were looking for a System Administrator to own and run our internal IT environment keep it secure and well-automated and be the go-to person for the systems our team depends on.

This is a hands-on role with real ownership. Youll administer our Microsoft 365 and Entra ID environment look after a mixed fleet of macOS and Windows devices and automate as much of the day-to-day as possible from identities and access to endpoints as we scale. Because our team includes developers with their own setups theres room to grow the role toward supporting developer machines and infrastructure tooling too.

Youll join Noxtuas Engineering organisation and work closely with the people whose day-to-day depends on solid IT across Engineering AI and the wider company. Youll be the owner of our internal IT systems: Microsoft 365 / Entra ID single sign-on and our endpoint fleet collaborating with team leads on access and security and with external providers where needed. Its a role with a lot of autonomy and visible impact on how effectively the whole company works.

• Microsoft 365 & identity: Hands-on experience administering Microsoft 365 and Entra ID user lifecycle groups licensing and access management.
• Heterogeneous environments: Comfortable supporting a mixed device fleet macOS and Windows endpoints (including some Windows desktops). Experience with Linux is a nice-to-have (largely developer machines in our case).
• Single sign-on (SSO): Solid general understanding of SSO where to apply it the concepts behind it and common integration paths (e.g. SAML / OIDC).
• Automation-first mindset: A big part of this role is automating a lot of what would otherwise be manual work you reach for scripts and tooling before doing things by hand. Scripting experience is important; Python is a nice-to-have.
• Configuration management: Experience with Ansible particularly valuable if the role also supports developer machines and infrastructure setup
• Location:Berlin-based able to be on site as needed for hands-on device and hardware support.

• Administer and optimize our Microsoft 365 / Entra ID environment identities groups licensing and access.

• Manage our heterogeneous endpoint fleet (macOS Windows and developer Linux machines) setup patching and support.

• Own and improve single sign-on deciding where it applies and building and maintaining integrations for our tools.

• Automate a large share of our IT operations scripting and tooling (e.g. Python Ansible) to take manual repetitive work off the table and eliminate configuration drift. This is central to the role not an afterthought.

• Handle onboarding and offboarding provisioning accounts devices and access and cleanly revoking them (ideally automated).

• Support developers and their machines and help manage infrastructure tooling where it overlaps with IT.

• Support our security and compliance posture access reviews MFA and audit-relevant records (e.g. ISO 27001 C5 TISAX).

• Document IT processes and maintain the asset and access inventory.

Building Europes sovereign Legal AI is ambitious meaningful work and we want the people doing it to be properly looked after. Our benefits are built around flexibility real-time off to recharge and the setup to do your best work.

• Hybrid: Berlin-based role with flexible remote days (some on-site presence needed for hands-on device and hardware support).

• Working hours: Flexible working hours.

• Vacation: 26 days December 24th & 31st off 1 additional vacation day per year of employment (up to 30 days).

• Discounts: e.g. Urban Sports Club membership depending on location.

• Equipment: Laptop (Lenovo or Mac) plus home-office setup budget (paid with your first salary).