IT System Administrator Windows (m/f/d)
IT Administrator responsible for hardening and securely operating Windows 11 and Linux systems, managing endpoint encryption (Rohde & Schwarz Trusted Disk) and EDR (Symantec), and ensuring compliance with VS-NfD classified information requirements at a drone/UAS manufacturer.
- Compensation
- Not disclosed
- Location
- Gilching, Bayern, Germany
- Work setup
- Hybrid
- Seniority
- Not specified
- Employment
- Not specified
- Experience
- Not specified
- Category
- Devops
- Posted
Skills
Must have
- Strong hands-on experience in Windows 11 administration and hardening (security baselines, BitLocker/alternatives, Credential Guard)
- Experience with Rohde & Schwarz Trusted Disk or comparable encryption solutions
- Experience with Symantec Endpoint Security or comparable EDR/AV products
- Knowledge of ACLs, GPOs, Intel TET, and PowerShell
- Experience hardening common Linux distributions (Debian/Ubuntu, RHEL/SUSE)
- Knowledge of SELinux/AppArmor, SSH hardening, firewalls (nftables/iptables), and permissions and service management
- Experience working with CIS Benchmarks and/or BSI requirements
- Good knowledge of networking concepts (TCP/IP, DNS, VLANs, firewalling)
- Proficiency in using Wireshark for network traffic analysis and troubleshooting
- Knowledge of the requirements for handling information classified as VS-NfD
- Willingness to undergo a security clearance procedure in accordance with the German Security Clearance Act (SÜG)
- Understanding of vulnerability and patch management processes
- Structured, documentation-oriented approach to work
- Proficiency in written and spoken German and English
- Strong communication skills, particularly when working with software developers
Nice to have
- Automation using Ansible and Bash scripting
- Experience working in environments with VS-NfD or similar security classifications
- Certifications such as CompTIA Security+, LPIC, or Microsoft SC-/MD-series
- Experience working in regulated environments (BSI, ISO 27001)
Full description
At Quantum Systems, we are redefining the future of unmanned systems with intelligent, autonomous solutions that enable better decisions in critical environments. Our mission is to combine cutting-edge technology, AI, and robust engineering to create next-generation intelligence solutions. As part of our IT team, you will play a key role in ensuring the security, stability, and resilience of our global IT infrastructure.
What is your Day to Day Mission:
- Hardening and secure operation of Windows 11 endpoints (security baselines, GPOs, security policies), including endpoints used as Ground Control Stations
- Administration and rollout of Rohde & Schwarz Trusted Disk (BSI-approved full-disk encryption for VS-NfD classified information)
- Implementation and compliance with requirements governing the handling of information classified as VS-NfD
- Operation and maintenance of Symantec Endpoint Security (Broadcom): policies, updates, and incident handling
- Vulnerability management, patch management, and compliance assessments
- Documentation of hardening measures and contribution to security concepts
##
What you bring to the team:
- Strong hands-on experience in Windows 11 administration and hardening (security baselines, BitLocker/alternatives, Credential Guard)
- Experience with Rohde & Schwarz Trusted Disk or comparable encryption solutions
- Experience with Symantec Endpoint Security or comparable EDR/AV products
- Knowledge of ACLs, GPOs, Intel TET, and PowerShell
- Experience hardening common distributions (Debian/Ubuntu, RHEL/SUSE)
- Experience working with CIS Benchmarks and/or BSI requirements; ideally with automation using Ansible and Bash scripting
- Good knowledge of networking concepts (TCP/IP, DNS, VLANs, firewalling)
- Proficiency in using Wireshark for network traffic analysis and troubleshooting
- Knowledge of the requirements for handling information classified as VS-NfD (ideally experience working in environments with corresponding security classifications; willingness to undergo a security clearance procedure in accordance with the German Security Clearance Act (SÜG))
- Understanding of vulnerability and patch management processes
- Structured, documentation-oriented approach to work; proficiency in written and spoken German and English
- Strong communication skills, particularly when working with software developers
- Certifications such as CompTIA Security+, LPIC, or Microsoft SC-/MD-series certifications