IT Support & System Engineer

Senior Corporate IT Engineer

Geneva, Switzerland · Corporate IT · Full time, permanent

About the role

Alpian is a Swiss digital bank, and Corporate IT keeps the bank running from the inside. Everyone here gets a secure laptop, phone and set of accounts that just work. Behind that, we keep the office network, Microsoft 365 and our corporate apps up, fast and compliant with the bank’s controls.

You’ll own the design, security and day-to-day running of our corporate IT platforms. You’ll be the senior engineer in a team of two, working with an IT Support Engineer who handles the helpdesk. When something tricky comes up, whether it’s an incident, a security alert or a puzzle nobody else can solve, it comes to you as level 3. It’s a small team with a big scope, so your work is visible and you have a real say in how things are built.

What you’ll do

Identity and access: who gets in, and how

Run Microsoft Entra ID: users, groups, access packages, MFA and external access.
Design and maintain Conditional Access (Zero Trust) and Privileged Identity Management (PIM).
Connect third-party apps with SSO and automatic provisioning (Enterprise Apps, SAML, OIDC).

Devices and endpoints: laptops that are ready on day one

Run Intune and Apple Business Manager for macOS, Windows and iOS.
Build zero-touch enrolment, configuration profiles and security baselines.
Package and deploy apps, and manage patching and update rollouts, using NinjaOne RMM for support.

Modern workplace: the tools everyone uses every day

Administer Exchange Online: mail flow, connectors, SPF, DKIM, DMARC, anti-spam and anti-phishing.
Run Teams, SharePoint and OneDrive, including Teams telephony (PSTN, call queues) and call recording.

Security and compliance: a bank’s version of “good enough” is a high bar

Run Microsoft Defender for Endpoint: EDR, vulnerability management and threat detection.
Run Microsoft Purview: sensitivity labels and DLP policies.
Work with our security team on alerts, misconfigurations and vulnerabilities.
Own IT controls, audit evidence and remediation plans.

Backup and infrastructure: the foundations nobody sees until they break

Run Microsoft 365 backup and restore with Veeam Data Cloud.
Manage our Azure estate: VNets, Azure Firewall, VPN gateway, Azure Virtual Desktop, and the VMs that host business apps.
Look after the office network: UniFi Wi-Fi and switching, firewall, internet lines and site-to-site VPNs.

Projects and improvement: making tomorrow easier than today

Lead IT projects from idea to rollout.
Automate repetitive work with scripts and infrastructure as code.
Keep our Confluence runbooks and documentation sharp and up to date.
Back up the helpdesk (Jira Service Management) and coach the IT Support Engineer.

What you bring

Must have

4+ years as a system engineer or senior IT support engineer in a Microsoft 365 environment.
Strong hands-on skills with Entra ID, Conditional Access, Intune and Exchange Online.
Solid knowledge of Microsoft security tools: Defender for Endpoint and Purview (labels, DLP).
Experience managing macOS and Windows at scale. Apple Business Manager is a strong plus.
PowerShell scripting (Microsoft Graph, Exchange Online and Entra modules).
A good grasp of networking: TCP/IP, DNS, DHCP, VLANs, VPN, firewalls and Wi-Fi.
Basic Azure skills: networking, VMs, RBAC, and cost and resource management.
A security mindset: least privilege, Zero Trust, disciplined patching and calm incident handling.
Clear written English. You can write a runbook a colleague can follow at 2 a.m., and explain IT to non-technical people without jargon.

Nice to have

Experience in a bank, fintech or other regulated company (FINMA, ISO 27001, audits, IT controls).
Working with an external SOC or SIEM (Microsoft Sentinel or similar).
Veeam for Microsoft 365, NinjaOne or UniFi.
SSO with SaaS apps such as Salesforce, Atlassian, GitHub and Google Cloud.
Jira Service Management administration.
Certifications such as MD-102, MS-102, SC-300, AZ-104 or AZ-500.

Who you are

Beyond the buzzwords and the long list of technologies, what we really want is someone with the right mindset:

You own your systems end to end, and you’d rather fix the root cause than patch the symptom twice.
You’re comfortable working on your own, and you stay calm when things go wrong.
You write down what you build, so the next person (or future you) doesn’t have to guess.
If you do something manually three times, you start writing a script.