System Administrator (m/f/d) | Legal AI Tech Scale-Up |Onsite

At Noxtua, we’re building Europe’s sovereign Legal AI — and the people building it need internal IT that just works: secure identities, reliable devices, and smooth access to the tools they use every day. We’re looking for a System Administrator to own and run our internal IT environment, keep it secure and well-automated, and be the go-to person for the systems our team depends on.

This is a hands-on role with real ownership. You’ll administer our Microsoft 365 and Entra ID environment, look after a mixed fleet of macOS and Windows devices, and automate as much of the day-to-day as possible — from identities and access to endpoints — as we scale. Because our team includes developers with their own setups, there’s room to grow the role toward supporting developer machines and infrastructure tooling too.

You’ll join Noxtua’s Engineering organisation and work closely with the people whose day-to-day depends on solid IT — across Engineering, AI, and the wider company. You’ll be the owner of our internal IT systems: Microsoft 365 / Entra ID, single sign-on, and our endpoint fleet, collaborating with team leads on access and security and with external providers where needed. It’s a role with a lot of autonomy and visible impact on how effectively the whole company works.

• Microsoft 365 & identity: Hands-on experience administering Microsoft 365 and Entra ID — user lifecycle, groups, licensing, and access management.
• Heterogeneous environments: Comfortable supporting a mixed device fleet — macOS and Windows endpoints (including some Windows desktops). Experience with Linux is a nice-to-have (largely developer machines in our case).
• Single sign-on (SSO): Solid general understanding of SSO — where to apply it, the concepts behind it, and common integration paths (e.g. SAML / OIDC).
• Automation-first mindset: A big part of this role is automating a lot of what would otherwise be manual work— you reach for scripts and tooling before doing things by hand. Scripting experience is important; Python is a nice-to-have.
• Configuration management: Experience with Ansible — particularly valuable if the role also supports developer machines and infrastructure setup
• Location:Berlin-based, able to be on site as needed for hands-on device and hardware support.

• Administer and optimize our Microsoft 365 / Entra ID environment — identities, groups, licensing, and access.

• Manage our heterogeneous endpoint fleet (macOS, Windows, and developer Linux machines) — setup, patching, and support.

• Own and improve single sign-on — deciding where it applies, and building and maintaining integrations for our tools.

• Automate a large share of our IT operations — scripting and tooling (e.g., Python, Ansible) to take manual, repetitive work off the table and eliminate configuration drift. This is central to the role, not an afterthought.

• Handle onboarding and offboarding — provisioning accounts, devices, and access, and cleanly revoking them (ideally automated).

• Support developers and their machines, and help manage infrastructure tooling where it overlaps with IT.

• Support our security and compliance posture — access reviews, MFA, and audit-relevant records (e.g., ISO 27001, C5, TISAX).

• Document IT processes and maintain the asset and access inventory.

Building Europe’s sovereign Legal AI is ambitious, meaningful work — and we want the people doing it to be properly looked after. Our benefits are built around flexibility, real-time off to recharge, and the setup to do your best work.

• Hybrid: Berlin-based role with flexible remote days (some on-site presence needed for hands-on device and hardware support).

• Working hours: Flexible working hours.

• Vacation: 26 days + December 24th & 31st off, + 1 additional vacation day per year of employment (up to 30 days).

• Discounts: e.g., Urban Sports Club membership, depending on location.

• Equipment: Laptop (Lenovo or Mac), plus home-office setup budget (paid with your first salary).