Why this role mattersYou will modernise and operate GOTEC’s hybrid cloud backbone – ensuring availability, automation, and security across plants in EMEA, NA, and APAC.Key Outcomes – First 12 months Migrate 2 production sites to new hybrid infrastructure with Zero Trust Segmentation Modernize and Migrate OT Network for at least 5 sites Automate TOP20 SIEM actions What you will do Operate and continuously improve our hybrid infrastructure (Azure, VMware/Hyper‑V, SAN, HCI) Lead or co-lead migration sprints (AD, file, OT/IT segmentation, legacy exits) Automate deployments and ops workflows via Bicep / Terraform, PowerShell, GitHub Actions / ADO Maintain and tune alerting (Azure Monitor, Grafana, Wazuh); coordinate follow‑the‑sun incident handling Apply Zero‑Trust principles (identity-first access, microsegmentation, policy-as-code) to hybrid infra Analyse and remediate vulnerabilities (LAPS, Defender, firmware baselines, patch compliance) Operate and evolve our network edge (VPN, FortiGate, SD‑WAN, ExpressRoute, MACsec, 802.1X) Document SOPs and patterns in SharePoint / Teams; mentor juniors on best practices Must-have skills 3+ years hands-on with Azure IaaS and VMware or Hyper‑V 3+ years hands-on with M365 administration (Intune, Exchange Online, Teams, SharePoint) Deep understanding of hybrid networking & Zero Trust (routing, VLAN, VPN, ExpressRoute, NAC, segmentation) IaC expertise (Bicep/Terraform) and real-world CI/CD experience Scripting proficiency (PowerShell / Bash) Basic security controls: MFA, Conditional Access, Defender, LAPS English B2+; willingness for follow‑the‑sun on-call, ≤ 10 % travel Nice to have Fortinet NGFW, industrial firewalls, SD‑WAN SIEM tuning (e.g. Wazuh, Prometheus → Grafana) Certificates: AZ‑104, VCP‑DCV, ITIL 4 Familiarity with TISAX, ISA/IEC 62443, ISO 27001 Language: German or Polish beneficial