We are looking for a System Engineer with Core Infrastructure knowledge to join our IT Infrastructure team in Frankfurt. The role focuses on the operation, administration, and reliability of Microsoft based enterprise infrastructure, with particular emphasis on Active Directory, Group Policy, virtualization, and core Windows services. The position is intended for an experienced, hands-on infrastructure engineer who can operate systems independently within established frameworks and processes, while ensuring secure, compliant, and stable operations in a BaFin-regulated environment.
Infrastructure Operations (BAU)
Operate and maintain core IT infrastructure services ensuring availability, stability, and performance
Independently handle day-to-day operational tasks within defined standards and procedures
Analyze and resolve infrastructure incidents, contributing to root cause analysis
Execute approved changes in line with formal change management processes
Participate in on-call rotation (if applicable)
Maintain accurate technical and operational documentation
Active Directory & Identity Management
Administration of Microsoft Active Directory (on‑premises): users, groups, computers, and Organizational Units.
Implementation, maintenance, and troubleshooting of Group Policy Objects
Resolve authentication, replication, and directory service issues
Support identity lifecycle management (joiners, movers, leavers)
Exposure to Microsoft Entra ID (Azure AD) and hybrid identity environments is appreciated
Virtualization & Server Management
Provisioning, operation, and lifecycle management of virtual machines
Administration of Windows Server environments including configuration and hardening
Monitor server performance, resource utilization, and capacity
Experience with Hyper-V virtualization is highly appreciated
DNS & Core Infrastructure Services
Administration and troubleshooting of DNS services
Support core Microsoft infrastructure services such as certificates coming from internal AD CS
Ensure stable integration between directory services, DNS, and network components
Email & Messaging Platforms
Operation and support of enterprise email platforms (on‑premises Exchange and/or Exchange Online)
Troubleshoot mail flow, access issues, and mailbox-related incidents
Support controlled operational changes while maintaining availability and compliance
Security, Patching & Regulatory Compliance
Execute Windows Server patching activities in defined maintenance windows
Apply system hardening measures and baseline security configurations
Support vulnerability remediation in collaboration with security teams
Ensure compliance with BaFin-relevant requirements such as auditability and access control
Solid hands-on experience with Active Directory
Practical experience managing Group Policies
Good knowledge of Windows Server administration
Experience managing virtual machines
Strong understanding of DNS and core Microsoft infrastructure services
Strong PowerShell scripting for administration and automation
3–5 years of professional experience in a System Engineer or Infrastructure Engineer role
Experience supporting enterprise IT environments
Degree in Information Technology, Computer Science, or equivalent professional experience
German – professional working proficiency (required)
English – professional working proficiency (required)
Experience with Hyper-V virtualization
Exposure to Microsoft Entra ID (Azure AD) and hybrid identity models
Experience with enterprise email platforms (Exchange Online or hybrid Exchange)
Experience with infrastructure monitoring solutions such as SCOM, PRTG, or comparable platforms
Experience working in financial services or regulated environments
An exciting working environment and challenging tasks
Extensive insight into the European fund industry
Friendly, international and goal-oriented working environment
High degree of independent work
Interesting discounts
Free Deutschland ticket
Attractive home office arrangements and working time flexibility
Send your CV to [email protected].
The recruiting entity here is Universal-Investment-Gesellschaft mbH
Click here to check our data protection notice.
Disclaimer for Recruitment Agencies: Universal Investment does not accept any CV’s received from recruitment agencies with whom terms and conditions have not been agreed and will not consider unsolicited CV’s or agree to pay any recruitment fee for them. This is applicable also for any CV that is submitted directly to our Hiring Managers.
If you are interested in becoming one of our preferred recruitment suppliers in the future, please email [email protected], and we will be glad to keep your details under consideration once our PSL is revised.
