Tenders Are Invited For It Services: Consulting, Software Development, Internet And Support – Senior System Engineer Fte

It Services: Consulting, Software Development, Internet And Support – Senior System Engineer Fte. General Conditions • Start: From September 1St, 2026 • Time Horizon: 5 Years • Capacity: 4-5 Days / Week (Corresponds To Approx. 80-100%) • Place Of Work: Flughafen Zürich Ag, Circle, 8058 Zurich Airport; On-Site Share 2/3 Of The Working Hours, Home Office Share 1/3 Of The Working Hours • Client And Supervisor: Teamlead Ict Windows Platforms Subject Of Service We Are Looking For An Experienced External Senior System Engineer To Provide Technical Support And Advice To Our Ict Windows Platforms Engineering Team. The Contractor Takes Responsibility For Defined Work Packages In The Area Of ​​Design, Engineering And Further Development Of The Hybrid Microsoft Infrastructure (Windows Server From Version 2016, Entra Id, Microsoft 365) At 3Rd Level. The Focus Of The Mandate Is At The Interface Between Infrastructure Security And Cloud-Native Automation: As A Proven Windows Server Specialist, The Contractor Realizes The Technical Implementation Of Strict Security Architectures (Active Directory Tier Model, Privileged Access Workstation (Paw), Public Key Infrastructure (Pki)) And Drives The Full Automation Of Complex Identity And Patch Processes. Customized Solutions Are Also Developed Using Azure Functions, Powershell And Api Integrations (Rest/Odata) To Seamlessly Orchestrate Systems Such As Adaxes, Omada And Entra Id. The Focus Is Clearly On Engineering Services Such As Architecture, Design, Transformation And Hardening Of The Platforms And Explicitly Not On Operational System Operation Or Classic System Administration. Tasks • Identity Platforms: Implementation As Well As Continuous Maintenance And Further Development Of The Active Directory And The Associated Infrastructure. This Includes, Among Other Things, The Tiering Model, Privileged Access Workstations And Hardening Measures. Engineering, Operation And Optimization Of Adfs, Okta And Microsoft Entra Id. • Os Engineering: Carrying Out Engineering Tasks In The Microsoft Os Stack (Including Windows Server 2025) With A Focus On The Technical Implementation And Further Development Of Os Hardening Measures. Development, Maintenance And Optimization Of Build And Deployment Standards As Well As Task Sequences In Microsoft Memcm/Sccm For Standardized Provision And Hardening Of Systems. Additionally Responsible For Analyzing And Evaluating Monthly Patch Cycles With Regard To Security, Compatibility And Rollout Strategy. • Security & Epp Platform: Independent Support And Further Development Of The Epp Platform (Palo Alto Networks) In The Context Of Server Engineering And The Active Directory Tiering Model In Collaboration With The Cyber ​​Defense Center (Cdc). Ensuring Correct Integration Into The Existing Security Architecture As Well As Supporting The Identification, Assessment And Remediation Of Security Vulnerabilities. • Automation: Conception, Implementation And Optimization Of The Automation Of Windows Servers (Memcm) And Identity Lifecycle P