Systems & Security Engineer (IT-CD-DPP-2026-133-GRAE) at CERN

You will join a dynamic team of IT engineers who manage over 500 servers, support over 10,000 Windows and 3,000 Mac endpoint devices, and provide over 100 software applications to the CERN user community. In this role, you will strengthen the security posture of Windows endpoints and services while helping to operate and evolve Windows Server and Microsoft SQL Server environments supporting business-critical applications across development, test, and production. Your responsibilities • Manage endpoint device security for Windows and macOS, including operations of Antivirus and Endpoint Detection & Response (EDR), both infrastructure and client deployment. • Deploy, operate, and maintain Microsoft SQL Server environments (development, test, production). • Develop and maintain service management and automation tooling using Microsoft .NET and PowerShell. • Conduct security audits and drive improvements for client-server protocols, authentication methods, and security ciphers. • Configure and maintain endpoint devices and application installation packages; contribute to configuration management and automation (e.g., Intune, MECM, PowerShell DSC, Puppet). • Deploy and maintain Windows Server services supporting enterprise applications. • Assess and support workload evolution, including feasibility studies for cloud deployment (cost, performance, and operational impact). • Implement monitoring tools and procedures to ensure availability, performance, and timely incident detection.Your profile • Experience deploying, operating, and troubleshooting endpoint security solutions (AV/EDR). • Experience administering database server environments. • Experience in software development or scripting for the Windows platform using Microsoft .NET and PowerShell. • Experience in Windows systems administration. • Experience with automation and configuration management in Windows environments is an advantage.Skills • Security mindset: interest in security and configuration management; ability to translate security requirements into practical, maintainable controls. • Endpoint protection: understanding of AV/EDR operations, baselining, hardening, and secure configuration practices. • Database fundamentals: good understanding of database systems and SQL. • Windows: knowledge of and interest in Windows client and server administration. • Scripting & automation: PowerShell, Microsoft .NET; ability to build tools that improve operational efficiency and security. Knowledge of Puppet, Grafana, Git, Docker, and exposure to commercial cloud platforms would be an advantage. • Communication skills: good communication skills and ability to collaborate with diverse technical and non-technical stakeholders. • Nice to have: familiarity with Active Directory, OS deployment, and common Microsoft enterprise services would be an advantage. • Spoken and written English, with a commitment to learn French.Eligibility criteria: • You are a national of a CERN Member or Associate Member State. • By the application deadline, you have a maximum of two years of professional experience since graduation in IT, Computing, Software Engineering (or a related field) and your highest educational qualification is either a Bachelor's or Master's degree. • You have never had a CERN fellow or graduate contract before. • Applicants without University degree are not eligible. • Applicants with a PhD are not eligible.