We are seeking an experienced Senior System Engineer to join our IT Infrastructure team. This role is responsible for the design, operation, and continuous improvement of core Microsoft infrastructure services, including server patching, enterprise messaging, identity services, and server lifecycle management within a regulated financial services environment. The position requires a hands-on expert capable of managing critical infrastructure platforms and ensuring their stability, security, and compliance.
Server Patching & Vulnerability Management
Own and execute the end-to-end server patch management lifecycle
Manage and optimize patching processes across the server estate using SCCM / relevant tooling
Define and maintain patching standards, baselines, and compliance reporting
Support vulnerability remediation in collaboration with Security teams
Ensure full auditability and regulatory compliance of patching activities
Operate and maintain enterprise email platform (Exchange Online / Hybrid Exchange)
Act as technical lead for mail flow, transport rules, and security controls
Support troubleshooting of complex messaging issues (mail routing, delivery, hygiene)
Contribute to email platform improvements, migrations, and decommissioning initiatives
Maintain and evolve Active Directory & core Microsoft services (DNS, GPO, authentication)
Support hybrid identity (Antra ID / Azure AD) integrations and governance
Ensure stability and performance of Windows Server environments
Contribute to infrastructure design and standardization
Apply system hardening and baseline configurations
Ensure alignment with regulatory frameworks (BaFin / CSSF / DORA)
Provide technical evidence for internal/external audits
Manage and maintain Windows Server lifecycle management, including:
Patching baselines
OS configuration standards
Hardening policies
Operate and optimize SCCM (or any 3rd party tooling) for server management, including:
Server patch orchestration (ADR tuning, phased deployments)
Configuration baselines and compliance enforcement
Ensure consistency and standardization across core server platforms
Support automation and reporting for server patching and compliance
Contribute to transition and integration with modern management approaches (e.g., Intune / Azure Update Manager) where relevant for servers
Provide 3rd-level support for infrastructure and messaging-related incidents
Lead root cause analysis and problem management for critical issues
Automate administrative and operational tasks using PowerShell
Continuously improving service reliability, performance, and operational processes
Manage and support certificate-based services across infrastructure systems
Operate and maintain S/MIME (Secure Email) capabilities, including:
Certificate deployment and lifecycle management
User and server certificate configuration
Troubleshooting encryption, signing, and trust issues
Ensure proper integration of certificates within:
Exchange Online / Hybrid email flows
Internal PKI / external certificate authorities
Support certificate renewal, automation, and compliance processes
Contribute to improving secure communication standards across the organization
Microsoft Exchange (Online / Hybrid)
Windows Server & Active Directory
SCCM / Microsoft Endpoint Configuration Manager (server-focused usage)
Solid knowledge of:
Entra ID (Azure AD) and hybrid identity architectures
Group Policy and authentication mechanisms
Core infrastructure services (DNS, networking fundamentals)
Strong PowerShell scripting and automation skills
Exchange migrations or email platform transformations
Modern management approaches (e.g., Intune, Azure-based services)
Security tools (e.g., Defender suite, vulnerability management platforms)
Monitoring solutions such as SCOM, PRTG, or equivalents
5–10 years of experience in IT infrastructure or system engineering roles
Experience supporting enterprise IT environments
Degree in Information Technology, Computer Science, or equivalent professional experience
Structured and reliable working style
Strong sense of responsibility and attention to detail
Ability to work independently within defined frameworks
Clear communication and documentation skills
Team-oriented mindset with strong service orientation
Ability to work effectively in a hybrid working model
An exciting working environment and challenging tasks
Extensive insight into the European fund industry
Friendly, international and goal-oriented working environment
High degree of independent work
Food vouchers and other attractive discounts
Free job ticket
Home office possibility and time flexibility
Send your CV to [email protected].
The recruiting entity here is Universal-Investment-Gesellschaft mbH/Universal-Beteiligungs- und Servicegesellschaft mbH/Universal-Investment-Labs GmbH/CAPinside GmbH/UI Enlyte-Gesellschaft mbH/UI BVK Kapitalverwaltungsge-sellschaft mbH/UI Information Technologies GmbH
Click here to check our data protection notice.
Disclaimer for Recruitment Agencies: Universal Investment does not accept any CV’s received from recruitment agencies with whom terms and conditions have not been agreed and will not consider unsolicited CV’s or agree to pay any recruitment fee for them. This is applicable also for any CV that is submitted directly to our Hiring Managers.
If you are interested in becoming one of our preferred recruitment suppliers in the future, please email [email protected], and we will be glad to keep your details under consideration once our PSL is revised.
