> Markdown version of [/jobs/ext/1131171-system-engineer-it-infrastructure](https://www.wearedevelopers.com/jobs/ext/1131171-system-engineer-it-infrastructure). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # System Engineer - IT Infrastructure - **Company:** Universal Investment Gesellschaft mbH - **Location:** Frankfurt am Main, Germany (Remote available) - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Active Directory, Systems Engineering, User Authentication, Authentication Protocols, Microsoft Azure, Configuration Management, Domain Name System (DNS), Microsoft Exchange Server, System Center Operations Management, System Center Configuration Manager, Windows Servers, Multi-Purpose Internet Mail Extensions (MIME), Networking Basics, Paessler Router Traffic Grapher, Public Key Infrastructure, Windows PowerShell, Azure Active Directory, Secure Messaging, Systems Integration, Software Vulnerability Management, Working Model 2D, Microsoft InTune, Information Technology, Patch Management - **Published:** July 2, 2026 - **Apply:** https://de.indeed.com/viewjob?jk=e5b4925429b01ad9 ## About the Role * Microsoft Exchange (Online / Hybrid) * Windows Server & Active Directory * SCCM / Microsoft Endpoint Configuration Manager (server-focused usage) * Solid knowledge of: * Entra ID (Azure AD) and hybrid identity architectures * Group Policy and authentication mechanisms * Core infrastructure services (DNS, networking fundamentals) * Strong PowerShell scripting and automation skills, * Exchange migrations or email platform transformations * Modern management approaches (e.g., Intune, Azure-based services) * Security tools (e.g., Defender suite, vulnerability management platforms) * Monitoring solutions such as SCOM, PRTG, or equivalents, * 5-10 years of experience in IT infrastructure or system engineering roles * Experience supporting enterprise IT environments * Degree in Information Technology, Computer Science, or equivalent professional experience, * German - professional working proficiency (required) * English - professional working proficiency (required), * Structured and reliable working style * Strong sense of responsibility and attention to detail * Ability to work independently within defined frameworks * Clear communication and documentation skills * Team-oriented mindset with strong service orientation * Ability to work effectively in a hybrid working model ## Description We are seeking an experienced Senior System Engineer to join our IT Infrastructure team. This role is responsible for the design, operation, and continuous improvement of core Microsoft infrastructure services, including server patching, enterprise messaging, identity services, and server lifecycle management within a regulated financial services environment. The position requires a hands-on expert capable of managing critical infrastructure platforms and ensuring their stability, security, and compliance., * Own and execute the end-to-end server patch management lifecycle * Manage and optimize patching processes across the server estate using SCCM / relevant tooling * Define and maintain patching standards, baselines, and compliance reporting * Support vulnerability remediation in collaboration with Security teams * Ensure full auditability and regulatory compliance of patching activities Messaging & Email Platform: * Operate and maintain enterprise email platform (Exchange Online / Hybrid Exchange) * Act as technical lead for mail flow, transport rules, and security controls * Support troubleshooting of complex messaging issues (mail routing, delivery, hygiene) * Contribute to email platform improvements, migrations, and decommissioning initiatives Core Infrastructure Services: * Maintain and evolve Active Directory & core Microsoft services (DNS, GPO, authentication) * Support hybrid identity (Antra ID / Azure AD) integrations and governance * Ensure stability and performance of Windows Server environments * Contribute to infrastructure design and standardization Security, Compliance & Audit: * Apply system hardening and baseline configurations * Ensure alignment with regulatory frameworks (BaFin / CSSF / DORA) * Provide technical evidence for internal/external audits Server Lifecycle & Configuration Management: * Manage and maintain Windows Server lifecycle management, including: * Patching baselines * OS configuration standards * Hardening policies * Operate and optimize SCCM (or any 3rd party tooling) for server management, including: * Server patch orchestration (ADR tuning, phased deployments) * Configuration baselines and compliance enforcement * Ensure consistency and standardization across core server platforms * Support automation and reporting for server patching and compliance * Contribute to transition and integration with modern management approaches (e.g., Intune / Azure Update Manager) where relevant for servers Operations & Continuous Improvement: * Provide 3rd-level support for infrastructure and messaging-related incidents * Lead root cause analysis and problem management for critical issues * Automate administrative and operational tasks using PowerShell * Continuously improving service reliability, performance, and operational processes Certificates & Secure Messaging: * Manage and support certificate-based services across infrastructure systems * Operate and maintain S/MIME (Secure Email) capabilities, including: * Certificate deployment and lifecycle management * User and server certificate configuration * Troubleshooting encryption, signing, and trust issues * Ensure proper integration of certificates within: * Exchange Online / Hybrid email flows * Internal PKI / external certificate authorities * Support certificate renewal, automation, and compliance processes * Contribute to improving secure communication standards across the organization ## Related Videos - [Developer Tools for Microsoft Azure](https://www.wearedevelopers.com/videos/450-developer-tools-for-microsoft-azure) - [This Is Not Your Father's .NET](https://www.wearedevelopers.com/videos/967-this-is-not-your-father-s-net) - [Less Is More: How Lagom and Agile Can Create Harmonious Workflows](https://www.wearedevelopers.com/videos/1993-less-is-more-how-lagom-and-agile-can-create-harmonious-workflows) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Develop enterprise-ready applications for Microsoft Teams with Azure resources on modern web technologies](https://www.wearedevelopers.com/videos/187-develop-enterprise-ready-applications-for-microsoft-teams-with-azure-resources-on-modern-web-technologies) - [Introducing Digital Samba Embedded Video Conferencing API MCP Server](https://www.wearedevelopers.com/videos/1640-introducing-digital-samba-embedded-video-conferencing-api-mcp-server) ## Related Articles - [Finding IT & Technology English-speaking Jobs in Germany ](https://www.wearedevelopers.com/magazine/446-finding-it-technology-english-speaking-jobs-in-germany) - [Finding Jobs in Germany](https://www.wearedevelopers.com/magazine/375-finding-jobs-in-germany) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [Jobs in Germany for Americans](https://www.wearedevelopers.com/magazine/423-jobs-in-germany-for-americans) - [IT Salaries in Germany](https://www.wearedevelopers.com/magazine/287-it-salaries-in-germany) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)