> Markdown version of [/jobs/ext/414833-systems-engineer](https://www.wearedevelopers.com/jobs/ext/414833-systems-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Systems Engineer - **Company:** QIMA - **Location:** Paris, France - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Active Directory, Application Programming Interfaces (APIs), Artificial Intelligence, Amazon Web Services, Systems Engineering, Microsoft Azure, Software as a Service, Cloud Engineering, Collaborative Software, Domainkeys Identified Mail, Domain-Based Message Authentication Reporting and Conformance (DMARC), Domain Name System (DNS), Human Resources Information System (HRIS), Identity and Access Management, Information Technology Operations, OAuth, OpenID, Windows PowerShell, Software Architecture, Role-Based Access Control, Azure Active Directory, Security Assertion Markup Language (SAML), Service Layer, Microsoft SharePoint, Single Sign-On, Software Deployment, Software Licensing, GitHub Copilot, Microsoft InTune, Sender Policy Framework (SPF), Information Technology, Deployment Automation, Patch Management, Restful APIs, Zendesk - **Published:** June 4, 2026 - **Apply:** https://fr.indeed.com/viewjob?jk=93cf52bf48f79947 ## About the Role * 5+ years of hands-on workplace and cloud engineering experience (Cloud platforms - Azure, AWS, GCP, Microsoft 365, Entra ID, Intune, Active Directory). * Demonstrated experience leading at least one significant workplace migration or integration project end-to-end. * Proven track record of building automation, not just using it. * Has experience working on APIs, MCPs, and can work on the creation of AI connectors as needed. Technical Skills * Deep expertise in Microsoft 365 tenant architecture and Exchange Online / Teams hybrid scenarios. * Expertise on managing cloud infrastructure (AWS/Azure/GCP). * Strong identity engineering skills: Entra ID, Active Directory, SSO federation (SAML / OIDC / OAuth 2.0), and lifecycle automation. * Strong Intune engineering skills: Autopilot, ADE, compliance policies, app protection, and cross-platform device management. * Hands-on experience with Apple Business Manager and automated device enrollment. * Practical experience with Datto RMM or an equivalent platform (NinjaRMM, ConnectWise Automate, etc.). * Hands-on experience operating endpoint AV / EDR at scale - Bitdefender, CrowdStrike, or equivalent. * Hands-on experience with domain transfers, DNS migrations, and email infrastructure cutovers - including MX records, mail routing validation, and working knowledge of SPF, DKIM, and DMARC sufficient to execute and validate configurations during migrations. * Strong proficiency in PowerShell and Microsoft Graph API; comfort with REST APIs and scripted automation. * Active interest in AI-assisted tooling and willingness to integrate it into daily engineering work. * Working knowledge of ITIL / ITSM practice; experience operating in a Freshdesk or comparable service management platform. * Fluent in English (written and spoken) - required for cross-region collaboration across QIMA's global teams. ## Description We are looking for a Senior System Engineer to own the end-to-end engineering and modernization of our IT Workplace environment. You will design, build, and operate, not just administer. You will be expected to bring strong opinions, make architectural decisions, and drive outcomes with minimal supervision. You will be working closely with the IT Infrastructure Operations, Security Engineering and Operations and IT Support. You are someone who reaches for a script before reaching for a GUI, who gets genuinely excited about AI-assisted automation, and who has led or significantly contributed to workplace migrations in complex, fast-moving environments. This role operates in two modes: steady-state engineering of QIMA's workplace platform and projects, and technical ownership of M&A integrations, which represent a significant share of the workload given QIMA's active acquisition pipeline. Both modes draw on the same engineering foundation; you will be expected to move fluently between them. What you will own Microsoft 365 & Workplace systems engineering * Maintain deep working knowledge of the QIMA Microsoft 365 tenant: Exchange Online, Teams, SharePoint Online, OneDrive for Business, Viva and adjacent workplace technologies (e.g. digital signage) as the technical foundation for all integration, migration, and project work. * Execute M365 workstream during integrations: tenant-to-tenant migrations, cross-platform migrations, and greenfield deployments - covering mailboxes, calendars, files, Teams, and shared resources with minimal disruption to end users. * Manage domain transfers and DNS migrations for acquired entities: registrar transfer, DNS record replication and cutover, MX record migration, mail routing validation, and working knowledge of email authentication records (SPF, DKIM, DMARC) sufficient to execute and validate configurations during migrations. * Build and maintain automation (PowerShell, Microsoft Graph API) and apply AI-assisted tooling (M365 Copilot, GitHub Copilot) to eliminate repetitive operational work and accelerate engineering tasks. * Operate the workplace service layer with ITIL discipline (incident, problem, change, service request) using Freshdesk as the tool of record. Identity & Access Management * Own the identity platform end-to-end during project migrations and M&A integrations: Microsoft Entra ID (Azure AD), on-premises Active Directory, and their hybrid interconnection. * Design and enforce Conditional Access policies, Privileged Identity Management (PIM), and role-based access control (RBAC) across the full application and service estate. * Engineer Single Sign-On (SSO) integrations for internal and third-party applications (SaaS, ERP, CRM, HRIS) using SAML, OAuth 2.0, and OIDC, etc. * Manage the identity lifecycle as part of M&A integrations: joiners, movers, leavers, and automated provisioning/deprovisioning via Entra ID governance and SCIM. * Harden the identity posture: enforce MFA, password less authentication, and zero-trust access principles across all user populations. Device Management & Zero-Touch Engineering * Assess the acquired entity's device fleet during discovery: total count, OS versions, MDM/RMM coverage, patch status, encryption state, and software licensing compliance - producing a clear recommendation per device (enroll as-is, re-image, or flag for replacement by IT Operations). * Execute device enrolment into QIMA's MDM and RMM platforms across all in-scope devices, using zero-touch provisioning workflows where possible (Windows Autopilot, Apple Automated Device Enrolment via Apple Business Manager). * Engineer Intune device configuration profiles, compliance policies, app protection policies (MDM/MAM), and self-service application catalogues for Windows, macOS. * Deploy and configure the RMM platform across the acquired fleet: monitoring, patch management, scripted remediation, and endpoint visibility - ensuring full coverage before handover to IT Operations. * Integrate RMM, MDM, and identity platforms into a unified, policy-driven device posture, ensuring every device is known, compliant, and secured before accessing corporate resources. Technical Project Management - Project Delivery and M&A Integration * Lead the technical workstream for projects and integration: scoping, planning, execution, and post-cutover stabilization, while working with the solutions architect for deployment of applications within the QIMA infrastructure. * Define and execute the integration strategy based on the source environment (tenant-to-tenant migration, cross-platform migration, on-premises lift-and-shift, or greenfield deployment): messaging, file services, identities, devices, and collaboration tools, with minimal disruption to end users. * Assess acquired entities' environments: Identity infrastructure (AD/directory topology, admin accounts, service accounts), collaboration platform (mail, files, calendar, chat), device fleet (OS versions, MDM/RMM coverage, patch status, encryption), server estate, domain portfolio, DNS configuration, email records (MX, SPF, DKIM, DMARC), public-facing web assets, SaaS subscriptions, and software licensing compliance. * Produce and own projects and integration playbooks, migration runbooks, project schedules, risk registers, and rollback procedures. * Conduct post-migration reviews, document lessons learned and continuously improve the integration methodology. ## Related Videos - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [The AI Agent Path to Prod: Building for Reliability](https://www.wearedevelopers.com/videos/1523-the-ai-agent-path-to-prod-building-for-reliability) - [Remote Driving on Plant Grounds with State-of-the-Art Cloud Technologies](https://www.wearedevelopers.com/videos/251-remote-driving-on-plant-grounds-with-state-of-the-art-cloud-technologies) - [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications) - [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak) - [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)