Projektportal
Projektdetails
As Head of IT Infrastructure & Security – Hands-on, you will take ownership of a critical, company-wide function that sits at the intersection of technology, security, and employee experience. This is a highly visible role in a fast-moving financial services environment, where you will shape the way IT operates, secure the digital workplace, and ensure the infrastructure remains scalable, resilient, and audit-ready. You will combine strategic thinking with strong technical execution, working closely with stakeholders across the business while remaining close to the details when needed.
In this position, you will lead the full IT landscape with a strong focus on macOS, Google Workspace, GCP, and Okta. You will be responsible for building and maintaining robust processes, supporting end users, strengthening security controls, and ensuring reliable operations across onboarding, offboarding, access management, cloud infrastructure, and incident response. The role is on-site in Berlin and requires a confident, hands-on leader who can communicate clearly, act decisively, and thrive in an environment where ownership and technical depth go hand in hand.
- You will own the end-to-end IT, infrastructure, identity, and security landscape and ensure it supports the business effectively.
- You will lead hands-on support for macOS endpoints, including deployment, configuration, troubleshooting, lifecycle management, and security hardening.
- You will manage and continuously improve Google Workspace administration, identity, access, policies, device controls, and security settings.
- You will oversee GCP infrastructure, including IAM, networking, logging, access controls, and cloud security practices.
- You will manage Okta as a core identity platform, including SSO, MFA, SCIM, application integrations, and privileged access workflows.
- You will design and implement secure, scalable IT and infrastructure architectures aligned with modern Zero Trust principles.
- You will establish and maintain IT and security policies, standards, controls, and procedures that support operational excellence and compliance.
- You will support incident response, vulnerability management, risk mitigation, backup strategies, business continuity, and disaster recovery.
- You will collaborate with internal stakeholders to ensure employees receive reliable, secure, and efficient IT support and tools.
- You will stay close to the technical details and step in directly when troubleshooting, incident handling, or urgent operational support is required.
Must-haves
For this position, you should bring several years of relevant experience and the confidence to operate in a role that combines leadership, architecture, and hands-on execution. You will be successful if you have already owned IT, Infrastructure, and Security responsibilities in a technology-driven environment, ideally within a startup, scale-up, or international organization. Because this role is based on-site in Berlin, you should be available to work from the office and be able to lead from the front when practical support or incident response is needed.
We are looking for someone with excellent professional English and strong communication skills, as the role requires regular interaction with employees, stakeholders, and technical partners. You should have deep hands-on expertise in macOS, Google Workspace, GCP, and Okta, along with a solid understanding of modern IT security, cybersecurity, cloud-first architecture, and identity management. Experience building secure, scalable operating models and the ability to balance strategic priorities with operational execution are essential. German language skills are a plus, but not required.
- You will bring 5–10 years of relevant experience in IT, Infrastructure, Security, or a closely related leadership role.
- You will have proven experience leading IT, Security, and Infrastructure in a technology-driven, startup, scale-up, or international environment.
- You will be able to work on-site in Berlin and support hands-on execution when required.
- You will communicate confidently in excellent professional English, both written and spoken.
- You will have strong hands-on macOS expertise, including endpoint management, configuration, troubleshooting, security, and lifecycle management.
- You will have deep experience with Google Workspace / Google Admin, including identity, access, security policies, device management, and administration.
- You will have strong practical knowledge of Google Cloud Platform, including infrastructure, IAM, networking, logging, and access controls.
- You will have extensive experience with Okta and modern Identity & Access Management, including SSO, MFA, SCIM, lifecycle management, and integrations.
- You will demonstrate a strong understanding of IT security and cybersecurity, including endpoint security, identity security, vulnerability management, and incident response.
- You will know how to design and implement secure, scalable IT and infrastructure architectures.
- You will understand Zero Trust principles and modern cloud-first security approaches.
- You will have experience establishing and maintaining IT and security policies, standards, controls, and procedures.
- You will be comfortable owning IT operations end-to-end, from onboarding and offboarding to infrastructure, SaaS, identity, and security.
- You will bring a hands-on troubleshooting mindset and a willingness to work directly on technical issues.
- You will have experience with IT risk management, business continuity, disaster recovery, backup strategies, and security incident handling.
- You will consider German language skills an advantage, though they are not mandatory.
- You will see experience with Jamf, Kandji, Mosyle, or similar macOS MDM platforms as a strong plus.
Nice-to-haves
+ German language skills are a plus
+ Experience building the IT and security function from the ground up
+ Experience in a high-growth startup/scale-up with distributed or international teams
+ Experience managing or mentoring IT / Infrastructure / Security engineers
+ Hands-on experience with Jamf, Kandji, Mosyle, or similar macOS MDM platforms