> Markdown version of [/jobs/ext/2499181-it-administrator-windows-linux-security-hardening](https://www.wearedevelopers.com/jobs/ext/2499181-it-administrator-windows-linux-security-hardening). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IT Administrator - Windows & Linux Security / Hardening - **Company:** Quantum-Systems GmbH - **Location:** Gilching, Germany (Remote available) - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Bash Shell, BitLocker Drive Encryption, Ubuntu (Operating System), CompTIA Security+, Computer Networks, Debian Linux, Linux, Domain Name System (DNS), Linux Security Modules, Network Forensics, Windows PowerShell, Red Hat Enterprise Linux, Broadcom, Ansible, TCP/IP, Wireshark, Virtual Local Area Networks, Software Vulnerability Management, Symantec, SUSE Linux, Firewalls (Computer Science), Selinux, Iptables, Patch Management, CIS Benchmarks - **Published:** August 27, 2026 - **Apply:** https://de.indeed.com/viewjob?jk=ab32cb0b56e52880 ## About the Role * Strong hands-on experience in Windows 11 administration and hardening (security baselines, BitLocker/alternatives, Credential Guard) * Experience with Rohde & Schwarz Trusted Disk or comparable encryption solutions * Experience with Symantec Endpoint Security or comparable EDR/AV products * Knowledge of ACLs, GPOs, Intel TET, and PowerShell * Experience hardening common distributions (Debian/Ubuntu, RHEL/SUSE) * Knowledge of SELinux/AppArmor, SSH hardening, firewalls (nftables/iptables), and permissions and service management * Experience working with CIS Benchmarks and/or BSI requirements; ideally with automation using Ansible and Bash scripting * Good knowledge of networking concepts (TCP/IP, DNS, VLANs, firewalling) * Proficiency in using Wireshark for network traffic analysis and troubleshooting * Knowledge of the requirements for handling information classified as VS-NfD (ideally experience working in environments with corresponding security classifications; willingness to undergo a security clearance procedure in accordance with the German Security Clearance Act (SÜG)) * Understanding of vulnerability and patch management processes * Structured, documentation-oriented approach to work; proficiency in written and spoken German and English * Strong communication skills, particularly when working with software developers * Certifications such as CompTIA Security+, LPIC, or Microsoft SC-/MD-series certifications * Experience working in regulated environments (BSI, ISO 27001) ## Description * Hardening and secure operation of Windows 11 endpoints (security baselines, GPOs, security policies), including endpoints used as Ground Control Stations * Administration and rollout of Rohde & Schwarz Trusted Disk (BSI-approved full-disk encryption for VS-NfD classified information) * Implementation and compliance with requirements governing the handling of information classified as VS-NfD * Operation and maintenance of Symantec Endpoint Security (Broadcom): policies, updates, and incident handling * Hardening of Linux systems in accordance with recognized standards (e.g., CIS Benchmarks) * Vulnerability management, patch management, and compliance assessments * Documentation of hardening measures and contribution to security concepts, * We believe in the power of combined efforts: straightforward tech expertise paired with a customer-centric focus. * We are industry pioneers who are ambitious, bold, and visionary. * We push limits, think outside-the-box and strive for technological excellence to shape the future of aerial data. * We promise to be your runway for individual and professional growth. ## Related Videos - [An Applied Introduction to eBPF with Go](https://www.wearedevelopers.com/videos/1075-an-applied-introduction-to-ebpf-with-go) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Enhancing Workload Security in Kubernetes](https://www.wearedevelopers.com/videos/356-enhancing-workload-security-in-kubernetes) - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [Turning Container security up to 11 with Capabilities](https://www.wearedevelopers.com/videos/718-turning-container-security-up-to-11-with-capabilities) - [For the Cars and the Curious: Android Drift](https://www.wearedevelopers.com/videos/499-for-the-cars-and-the-curious-android-drift) ## Related Articles - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [System change: restart as developer?](https://www.wearedevelopers.com/magazine/39-system-change-restart-as-developer) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [Finding IT & Technology English-speaking Jobs in Germany ](https://www.wearedevelopers.com/magazine/446-finding-it-technology-english-speaking-jobs-in-germany) - [IT Salaries in Germany](https://www.wearedevelopers.com/magazine/287-it-salaries-in-germany) - [Best Coding Boot Camps in Germany](https://www.wearedevelopers.com/magazine/237-best-coding-boot-camps-in-germany)