What you'll do
You will join a dynamic team of IT engineers who manage over 500 servers, support over 10,000 Windows and 3,000 Mac endpoint devices, and provide over 100 software applications to the CERN user community. In this role, you will strengthen the security posture of Windows endpoints and services while helping to operate and evolve Windows Server and Microsoft SQL Server environments supporting business-critical applications across development, test, and production.
Your responsibilities
- Manage endpoint device security for Windows and macOS, including operations of Antivirus and Endpoint Detection & Response (EDR), both infrastructure and client deployment.
- Deploy, operate, and maintain Microsoft SQL Server environments (development, test, production).
- Develop and maintain service management and automation tooling using Microsoft .NET and PowerShell.
- Conduct security audits and drive improvements for client-server protocols, authentication methods, and security ciphers.
- Configure and maintain endpoint devices and application installation packages; contribute to configuration management and automation (e.g., Intune, MECM, PowerShell DSC, Puppet).
- Deploy and maintain Windows Server services supporting enterprise applications.
- Assess and support workload evolution, including feasibility studies for cloud deployment (cost, performance, and operational impact).
- Implement monitoring tools and procedures to ensure availability, performance, and timely incident detection.
Still here? Let's make a quick check about
Your profile
- Experience deploying, operating, and troubleshooting endpoint security solutions (AV/EDR).
- Experience administering database server environments.
- Experience in software development or scripting for the Windows platform using Microsoft .NET and PowerShell.
- Experience in Windows systems administration.
- Experience with automation and configuration management in Windows environments is an advantage.
- Your studies focused on IT, Computing, Software Engineering.
Your skills
- Security mindset: interest in security and configuration management; ability to translate security requirements into practical, maintainable controls.
- Endpoint protection: understanding of AV/EDR operations, baselining, hardening, and secure configuration practices.
- Database fundamentals: good understanding of database systems and SQL.
- Windows: knowledge of and interest in Windows client and server administration.
- Scripting & automation: PowerShell, Microsoft .NET; ability to build tools that improve operational efficiency and security. Knowledge of Puppet, Grafana, Git, Docker, and exposure to commercial cloud platforms would be an advantage.
- Communication skills: good communication skills and ability to collaborate with diverse technical and non-technical stakeholders.
- Nice to have: familiarity with Active Directory, OS deployment, and common Microsoft enterprise services would be an advantage.
- Spoken and written English, with a commitment to learn French.
Global Benefits at CERN
Let's get you ready
Be sure to meet the eligibility criteria
- You are a national of a CERN Member State or Associate Member State. Currently, we cannot consider applications from Pakistani and Lithuanian nationals for positions with a 2026 start date, as the ceiling defined under Article II.5 of the Associate Membership Agreement has been reached.
- By the application deadline, you have a maximum of 2 years of professional experience since graduation in the respective field and your highest educational qualification is either a bachelor’s or master’s degree. You must have a university degree and can’t hold a PhD.
- You have never had a CERN fellow or graduate contract before.
- Please pay attention to the additional criteria and requirements for this specific position and mentioned above.
You will need these documents to complete your application
- Your CV (English or French)
- A copy of your most relevant diploma or a certificate of achievement from your school (if you don't yet have your paper diploma)
- Any document you consider relevant to your application