Senior IT Infrastructure Engineer

About MindMaze Therapeutics MindMaze Therapeutics, a publicly listed, innovative scale-up headquartered in Switzerland, at the forefront of neuro-therapeutics and digital brain health solutions. Operating in a regulated medical device environment, MindMaze Therapeutics is dedicated to developing cutting-edge technology that supports neurological recovery and treatment. As the company continues to grow we are looking for a Senior IT Infrastructure Engineer to help run the systems the whole company depends on — cloud and on-premise infrastructure, our Atlassian and Google Workspace environments, identity, networking and the security controls that sit across all of it. You will be based in our Cluj-Napoca office, working alongside the local team. The core network and on- premise estate you maintain sits in Lausanne, Switzerland, so a large part of the job is operating and automating remote infrastructure with confidence, in close coordination with colleagues on site there. This is a senior individual-contributor role reporting to the Lead IT Infrastructure. You will not be handed a runbook and a ticket queue: you will help decide how our infrastructure should look, build it, automate it, and keep it running. Expect real ownership, direct access to decision-makers, and the freedom to fix things properly rather than patch around them. Responsibilities Cloud and core infrastructure Support the Product Team operating our products cloud environments (Azure / AWS), Maintain the on-premise estate in Lausanne (firewalls, switching, VPN), Support the Ansible-driven automation effort, Participate to backup, restore and disaster recovery end to end, Monitor, alert and capacity-plan so problems surface before users report them. Atlassian, Google Workspace and identity Administer the Atlassian stack — Jira, Confluence and Bitbucket: projects and spaces, permission schemes, workflows, apps, integrations, upgrades and backups, Administer Google Workspace — Gmail, Drive and shared drives, groups, org units, sharing policies and security settings, Own identity and access across our Kerberos, LDAP and Keycloak stack: realms, federation, SSO and MFA, service accounts, and clean joiner/mover/leaver processes. Security and resilience Harden systems and networks: segmentation, least privilege, endpoint protection, logging and vulnerability management, Keep patching, configuration baselines and asset inventory in a state you would be comfortable showing an auditor, Contribute to incident response — detection, containment, recovery and honest post-mortems, Apply sensible data protection and access controls in line with GDPR and internal policy. Ways of working Document what you build, so the team can run it without you, Work effectively across sites and time zones with the Lausanne team, Partner with engineering, R&D and operations to make sure infrastructure decisions support what the business is actually trying to do. What we're looking for 3+ years in IT infrastructure, systems or platform engineering, Strong hands-on experience with at least one major cloud platform (Azure preferred, AWS welcome) — networking, identity, security and cost management, Hands-on administration of the Atlassian suite (Jira, Confluence, Bitbucket) — permissions, workflows, integrations and maintenance, Google Workspace administration experience (Gmail, Drive, groups, admin console policies), Practical experience with Kerberos, LDAP and Keycloak — or equivalent open identity stacks — including SSO, federation and MFA, Solid networking fundamentals: TCP/IP, DNS, DHCP, routing, VLANs, firewalls, VPN — and the discipline to manage a remote site network safely, Comfortable in Linux (mostly Debian) and Windows server administration, Scripting and automation as a default reflex, Practical security mindset: you design for least privilege and defensible configuration without turning IT into a blocker, Clear communicator in English, able to explain technical trade-offs to non-technical stakeholders, Self-directed: you can pick up an ambiguous problem, scope it and deliver it without close supervision. Nice to have Infrastructure-as-code and CI/CD experience (Terraform, Ansible, Azure DevOps, GitHub Actions), Containers and orchestration (Docker, Kubernetes). Experience supporting ISO 27001 and SOC 2 — control implementation, evidence collection and audit preparation. Additional languages alongside English — French is useful for working with the Lausanne site.