IT Systems & Security Engineer

About Medimaps Group:

Medimaps Group is the world’s leading company designing and providing medical imaging software for bone health assessment for improved fracture risk assessment. We are a rapidly growing company developing and commercializing medical imaging software powered by AI. Headquartered in Geneva, Switzerland, with offices in the US, Denmark and France, we currently total 80+ people, and we are still growing.

Position: IT Systems & Security Engineer

Location: Switzerland – regular on-site presence required

Start Date: ASAP, or as agreed

Contract: Full time employment

We are looking for a hands-on IT Systems & Security Engineer who combines strong infrastructure expertise with a genuine security mindset. You will work across cloud, on-premise infrastructure, networking and cybersecurity in a role where autonomy, problem-solving, documentation and technical ownership are essential.

About the Role:

Reporting directly to the IT Engineer & Systems Administration Manager, you will be responsible for the implementation, maintenance, configuration and reliable operation of Medimaps’ corporate and infrastructure IT environment.

Your scope will cover Microsoft Azure, Microsoft 365, on-premise virtualisation, networking, servers, end-user computing and security operations.

Security is at the heart of the role. You will help ensure our systems are secure by default while managing day-to-day security activities including monitoring, vulnerability management, patching, hardening, access control and incident follow-up.

As part of a small and highly collaborative IT team, you will have significant hands-on responsibility and autonomy. Strong written documentation is essential: every system you operate should be secure, reliable and documented well enough that another team member can operate it independently.

What You’ll Do:

• Install, configure, update and upgrade servers, virtual machines, network equipment, workstations and software.
• Operate and maintain the Microsoft Azure environment, including IaaS and PaaS resources, networking, subscriptions, monitoring, backup, tagging and resource organisation.
• Administer Microsoft 365 and Microsoft Entra ID, including Exchange Online, SharePoint, OneDrive, Teams, Intune, licensing, groups and conditional access.
• Operate and maintain on-premise virtualisation environments, including VMware ESXi/vCenter and Proxmox VE.
• Manage the network environment, including firewalls, VLANs, routing, VPN, DNS, DHCP, reverse proxies, TLS certificates, WiFi and network segmentation.
• Administer Windows Server and Linux systems, storage, capacity and performance, including SAN, NAS and database hosting.
• Automate recurring administration activities using PowerShell and shell scripting, with versioned and documented scripts.
• Run day-to-day security operations, including security monitoring, SIEM, vulnerability management, patching, hardening, endpoint protection and privileged access management.
• Handle security incidents through containment, investigation, documentation and lessons learned, and contribute to cyber security awareness across the organisation.
• Manage backup and recovery operations, perform documented restore tests and contribute to disaster recovery and business continuity planning.
• Provide 1st, 2nd and 3rd level IT support to internal colleagues and manage incidents and requests through the ticketing system.
• Maintain clear, structured technical documentation, runbooks, inventories, network diagrams, access records and technical specifications.
• Participate in IT and R&D projects from design and deployment through to operation and support.
• Contribute to Medimaps’ security and compliance roadmap, including CIS Controls and Benchmarks, ISO 27001, SOC 2 Type II, NIS2-related expectations, GDPR and Swiss data protection requirements.

What We’re Looking For:

(please ensure you have all the ESSENTIAL Skills before applying)

Mandatory Technical Skills :

• Degree in Engineering, Computer Science, Communication Systems, Computer Engineering, Telecommunications or a related discipline; Master’s degree is a plus.
• At least 2–4 years of hands-on experience in enterprise IT infrastructure, covering servers, virtualisation, networking, cloud environments and user/account management, with demonstrated involvement in IT security.
• Strong hands-on knowledge of Microsoft Azure, including IaaS, networking, Entra ID, resource management, monitoring and backup.
• Experience administering Microsoft 365, including Exchange Online, SharePoint/OneDrive, Teams, Intune and Microsoft Defender.
• Virtualization experience, particularly VMware ESXi and vCenter, including clusters, high availability, VM migration, snapshots and templates.
• Experience administering both Windows Server and Linux environments, including hybrid identity and directory services.
• Strong networking knowledge, including firewalls, VLANs, segmentation, routing, VPN, DNS, DHCP, reverse proxies, DMZ and trust-zone principles.
• Experience with PowerShell and shell scripting for system administration and automation.
• Good understanding of security operations, including SIEM concepts, EDR, vulnerability management, patch management and hardening baselines.
• Understanding of backup and recovery principles, including restore testing, RTO, RPO and recovery order.
• Familiarity with CIS Controls and CIS Benchmarks, with awareness of ISO 27001, SOC 2 Type II and NIS2-related requirements.
• Strong documentation and ticketing practice using tools such as Jira, Confluence, GLPI or equivalent, together with asset and configuration management disciplines.

Soft Skills :

• A genuine security-first mindset, with the instinct to assess risk, apply least privilege and leave systems more secure than you found them.
• Autonomous and proactive, while able to collaborate effectively within a small team and across the wider organisation.
• Structured and methodical, with a strong habit of documenting systems, decisions and technical work as you go.
• Strong analytical and problem-solving skills, with the ability to understand business requirements and propose practical, proportionate technical solutions.
• Able to communicate technical concepts clearly to both technical and non-technical colleagues, customers and external partners.
• User and solutions oriented, with a strong focus on quality and results.
• Flexible and agile, with the ability to thrive in a dynamic, innovative and fast-growing organisation.
• Curious and committed to continuous learning, with a genuine passion for IT infrastructure and cybersecurity.
• Ethical, honest and respectful in all personal and professional interactions.

Languages : Fluent English and business-level French are required. Any other language is a plus.

What can you expect from us?

As we work to develop innovative patient solutions, we also work hard to support our teammates’ professional development, personal growth and well-being. You will join an international, multi-cultural and socially responsible company with meaningful corporate values, an inspiring mission and a talented, professional and friendly team.

• A meaningful role in a fast-growing international MedTech company.
• A collaborative environment where autonomy, ownership and continuous learning are encouraged.
• The opportunity to work across a broad and modern IT estate spanning cloud, infrastructure, networking and cybersecurity.
• A role with real impact on the reliability, resilience and security of the systems supporting our business and our mission.
• Competitive compensation and benefits in line with the Swiss employment framework and the responsibilities of the role.

HOW TO APPLY

If this sounds like the opportunity you have been waiting for, please apply immediately with your CV and letter of application (in one PDF document).

IMPORTANT: As part of our recruitment process, you may be invited to complete a short pre-screening step designed to better understand your experience and expectations. This step takes the form of a quick interactive exchange, allowing you to provide additional context beyond your CV (e.g. your experience, availability, or working preferences). It helps us ensure a fair and efficient review of applications while saving time for both you and our recruitment team. The experience is simple, takes approximately 15-20 minutes, and is designed to give you the opportunity to highlight what matters most in your profile. A link to the survey will be provided when you start the LinkedIn application process (press apply). We're excited to get to know you better. Thank you in advance for your participation.

Timeline: Please note that the hiring process may take a few weeks. We value your application and promise to get back to you as soon as we possibly can. Thank you in advance for your patience.

InMail Messages: Please note that due to the large number of messages we receive, we cannot guarantee an individual response to your LinkedIn InMails. We will do our best. Please do not apply through InMail with your CV; please use the normal LinkedIn application method.

Medimaps is an equal opportunity employer celebrating diversity and committed to creating an inclusive environment for all employees.

Data Privacy: By submitting your application, you agree to share your personal data with the Medimaps Group solely for the purpose of recruitment and employment-related evaluations. Your information will be handled in accordance with applicable data protection laws and will only be used for assessing your suitability for this and potential future positions within the Company. All personal data provided will remain confidential and will not be shared with third parties without your prior and explicit consent. You have the right to withdraw your consent or request access to your data at any stage of the recruitment process.

Recruitment Agencies: Please note that we will be unable to partner with you for this hire. Thank you for your understanding!