{"id":254009,"title":"(Senior) Systems Engineer – IT Architect","company":"Helsing","city":"München","region":"Bayern","location":"Munich - Berlin","work_model":"remote","employment_type":"unknown","employment":["full_time"],"roles":["architecture"],"visa":"not_mentioned","relocation":"offered","posted_at":"2026-11-06T15:25:52+00:00","tools":["Azure","Active Directory","SIEM","Zero Trust","Linux","Kubernetes","Infrastructure as Code","Terraform"],"seniority":"senior","years_experience_min":null,"german_requirement":"required","german_level":"unspecified","english_requirement":"required","english_level":"C1","team_language":"unknown","confidence":0.7,"method":"rules","language_badge":"German required","language_evidence":"Communicate fluently in German and English (C1) with internal and external stakeholders","requirements_snippet":"Have worked across the Microsoft 365 and Azure security stack (Entra ID, Intune, Defender, Purview) Have built infrastructure that feeds SIEM platforms and automated response workflows Have taken systems through formal national …","url":"https://helsing.ai/jobs/5029924101?gh_jid=5029924101","source":"greenhouse","agency":null,"description_text":"Who we are\n\nHelsing is a defence AI company. Our mission is to protect our democracies. We aim to achieve technological leadership, so that open societies can continue to make sovereign decisions and control their ethical standards.\n\nAs democracies, we believe we have a special responsibility to be thoughtful about the development and deployment of powerful technologies like AI. We take this responsibility seriously.\n\nWe are an ambitious and committed team of engineers, AI specialists and customer-facing programme managers. We are looking for mission-driven people to join our European teams – and apply their skills to solve the most complex and impactful problems. We embrace an open and transparent culture that welcomes healthy debates on the use of technology in defence, its benefits, and its ethical implications.\n\nThe role\n\nAs a (Senior) Systems Engineer – IT Architect, you will define the architecture of the IT estate that supports Helsing's European offices and engineering teams, and build its key parts yourself. Across endpoint, identity, network, on-premises and cloud, you will work with Security, Engineering and IT Operations to turn operational and compliance requirements into clear roadmaps. You will prove your designs with reference implementations, then hand them to the IT Engineers and IT Support team to run. Working in German and English with colleagues, auditors and authorities, you will help Helsing scale across jurisdictions without weakening security or slowing engineers down.\n\nThe day-to-day\n\n•\nArchitect and build end-to-end systems across corporate, development and regulated environments, connecting Microsoft 365, Azure and on-premises infrastructure securely\n\n•\nDesign and implement identity, access and device management (Entra ID, Conditional Access, MDM) that enforces Zero Trust on macOS, Windows and Linux endpoints\n\n•\nDefine network and boundary protection for European sites and remote work, including segmentation, VPNs, and host- and network-based controls\n\n•\nSet standards and reference builds for on-premises compute on Linux, virtualisation and Kubernetes\n\n•\nAutomate with Infrastructure as Code (Terraform, Ansible, Python, PowerShell) so every system is reproducible and auditable\n\n•\nWork with Security, Compliance and external auditors to turn ISO 27001, NIS2, BSI IT-Grundschutz and UK Secure by Design into accreditation-ready architectures\n\n•\nMake key architecture decisions, document the trade-offs, and review designs with IT Engineers and the IT Support team\n\nYou should apply if you\n\n•\nHave proven experience designing and building enterprise IT systems with security and compliance built in, ideally in defence, government or other regulated sectors\n\n•\nHave hands-on experience with hybrid environments: Linux on-premises, Kubernetes, macOS, Windows, and Azure, Microsoft 365 or AWS\n\n•\nHave built identity, network segmentation and Zero Trust architectures, automated with Infrastructure as Code\n\n•\nTurn ambiguous regulatory and cross-border requirements into clear roadmaps, and explain trade-offs to technical and non-technical colleagues\n\n•\nCollaborate openly across teams and share our commitment to protecting democratic societies\n\n•\nCommunicate fluently in German and English (C1) with internal and external stakeholders\n\nNote: We operate in an industry where women, as well as other minority groups, are systematically under-represented. We encourage you to apply even if you don’t meet all the listed qualifications; ability and impact cannot be summarised in a few bullet points.\n\nNice to Have\n\n•\nHave worked across the Microsoft 365 and Azure security stack (Entra ID, Intune, Defender, Purview)\n\n•\nHave built infrastructure that feeds SIEM platforms and automated response workflows\n\n•\nHave taken systems through formal national or defence accreditation\n\n•\nHave scaled IT systems across several countries in a fast-growing engineering organisation\n\nJoin Helsing and work with world-leading experts in their fields\n\n•\nHelsing’s work is important. You’ll be directly contributing to the protection of democratic countries while balancing both ethical and geopolitical concerns\n\n•\nThe work is unique. We operate in a domain that has highly unusual technical requirements and constraints, and where robustness, safety, and ethical considerations are vital. You will face unique Engineering and AI challenges that make a meaningful impact in the world\n\n•\nOur work frequently takes us right up to the state of the art in technical innovation, be it reinforcement learning, distributed systems, generative AI, or deployment infrastructure. The defence industry is entering the most exciting phase of the technological development curve. Advances in our field of world are not incremental: Helsing is part of, and often leading, historic leaps forward\n\n•\nIn our domain, success is a matter of order-of-magnitude improvements and novel capabilities. This means we take bets, aim high, and focus on big opportunities. Despite being a relatively young company, Helsing has already been selected for multiple significant government contracts\n\n•\nWe actively encourage healthy, proactive, and diverse debate internally about what we do and how we choose to do it. Teams and individual engineers are trusted (and encouraged) to practise responsible autonomy and critical thinking, and to focus on outcomes, not conformity. At Helsing you will have a say in how we (and you!) work, the opportunity to engage on what does and doesn’t work, and to take ownership of aspects of our culture that you care deeply about\n\nWhat we offer\n\n•\nCompetitive salary and VSOP options\n\n•\nRelocation support: up to €2,500 and 4 weeks temporary accommodation\n\n•\nLearning: €500/£450 yearly allowance\n\n•\nHealth & wellness: gym membership and mental health support (Nilo.health)\n\n•\nSocial: regularly company events and monthly social allowances\n\n•\nEnhanced parental leave: 22 weeks fully paid for primary caregivers & 6 weeks for secondary caregivers.\n\n•\nFamily support: 5 days of paid family emergency leave, 100% remote work option during pregnancy and phased return to work\n\nThese are the core benefits across all locations, there may be additional benefits in certain locations.\n\nHelsing is an equal opportunities employer. We are committed to equal employment opportunity regardless of race, religion, sexual orientation, age, marital status, disability or gender identity. Please do not submit personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, data concerning your health, or data concerning your sexual orientation.\n\nHelsing's Candidate Privacy and Confidentiality Regime can be found here.","responsibilities_text":"As a (Senior) Systems Engineer – IT Architect, you will define the architecture of the IT estate that supports Helsing's European offices and engineering teams, and build its key parts yourself. Across endpoint, identity, network, on-premises and cloud, you will work with Security, Engineering and IT Operations to turn operational and compliance requirements into clear roadmaps. You will prove your designs with reference implementations, then hand them to the IT Engineers and IT Support team to run. Working in German and English with colleagues, auditors and authorities, you will help Helsing scale across jurisdictions without weakening security or slowing engineers down.\nThe day-to-day\n•\nArchitect and build end-to-end systems across corporate, development and regulated environments, connecting Microsoft 365, Azure and on-premises infrastructure securely\n•\nDesign and implement identity, access and device management (Entra ID, Conditional Access, MDM) that enforces Zero Trust on macOS, Windows and Linux endpoints\n•\nDefine network and boundary protection for European sites and remote work, including segmentation, VPNs, and host- and network-based controls\n•\nSet standards and reference builds for on-premises compute on Linux, virtualisation and Kubernetes\n•\nAutomate with Infrastructure as Code (Terraform, Ansible, Python, PowerShell) so every system is reproducible and auditable\n•\nWork with Security, Compliance and external auditors to turn ISO 27001, NIS2, BSI IT-Grundschutz and UK Secure by Design into accreditation-ready architectures\n•\nMake key architecture decisions, document the trade-offs, and review designs with IT Engineers and the IT Support team\nYou should apply if you\n•\nHave proven experience designing and building enterprise IT systems with security and compliance built in, ideally in defence, government or other regulated sectors\n•\nHave hands-on experience with hybrid environments: Linux on-premises, Kubernetes, macOS, Windows, and Azure, Microsoft 365 or AWS\n•\nHave built identity, network segmentation and Zero Trust architectures, automated with Infrastructure as Code\n•\nTurn ambiguous regulatory and cross-border requirements into clear roadmaps, and explain trade-offs to technical and non-technical colleagues\n•\nCollaborate openly across teams and share our commitment to protecting democratic societies\n•\nCommunicate fluently in German and English (C1) with internal and external stakeholders\nNote: We operate in an industry where women, as well as other minority groups, are systematically under-represented. We encourage you to apply even if you don’t meet all the listed qualifications; ability and impact cannot be summarised in a few bullet points.","requirements_text":"•\nHave worked across the Microsoft 365 and Azure security stack (Entra ID, Intune, Defender, Purview)\n•\nHave built infrastructure that feeds SIEM platforms and automated response workflows\n•\nHave taken systems through formal national or defence accreditation\n•\nHave scaled IT systems across several countries in a fast-growing engineering organisation\nJoin Helsing and work with world-leading experts in their fields\n•\nHelsing’s work is important. You’ll be directly contributing to the protection of democratic countries while balancing both ethical and geopolitical concerns\n•\nThe work is unique. We operate in a domain that has highly unusual technical requirements and constraints, and where robustness, safety, and ethical considerations are vital. You will face unique Engineering and AI challenges that make a meaningful impact in the world\n•\nOur work frequently takes us right up to the state of the art in technical innovation, be it reinforcement learning, distributed systems, generative AI, or deployment infrastructure. The defence industry is entering the most exciting phase of the technological development curve. Advances in our field of world are not incremental: Helsing is part of, and often leading, historic leaps forward\n•\nIn our domain, success is a matter of order-of-magnitude improvements and novel capabilities. This means we take bets, aim high, and focus on big opportunities. Despite being a relatively young company, Helsing has already been selected for multiple significant government contracts\n•\nWe actively encourage healthy, proactive, and diverse debate internally about what we do and how we choose to do it. Teams and individual engineers are trusted (and encouraged) to practise responsible autonomy and critical thinking, and to focus on outcomes, not conformity. At Helsing you will have a say in how we (and you!) work, the opportunity to engage on what does and doesn’t work, and to take ownership of aspects of our culture that you care deeply about","status":"open","duplicate_of":null,"first_seen":"2026-11-06T16:15:43.751662+00:00","responsibilities_summary":null,"requirements_summary":null,"all_tools":["Azure","Active Directory","SIEM","Zero Trust","Linux","Kubernetes","Infrastructure as Code","Terraform","Ansible","Python","PowerShell","ISO 27001","BSI IT-Grundschutz","AWS"],"posting_language":"en","evidence":[{"language":"english","requirement":"required","quote":"Communicate fluently in German and English (C1) with internal and external stakeholders","source":"rules"},{"language":"german","requirement":"required","quote":"Communicate fluently in German and English (C1) with internal and external stakeholders","source":"rules"}],"years_experience_max":null,"mobility_evidence":[{"kind":"relocation","quote":"Relocation support: up to €2,500 and 4 weeks temporary accommodation","value":"offered"}],"model_version":"rules-9","english_badge":"English required (C1)","company_id":39}