At Noxtua, we’re building Europe’s sovereign Legal AI — and the people building it need internal IT that just works: secure identities, reliable devices, and smooth access to the tools they use every day. We’re looking for a System Administrator to own and run our internal IT environment, keep it secure and well-automated, and be the go-to person for the systems our team depends on.
🏢 About Noxtua
Noxtua is building Europe’s sovereign Legal AI, focusing on creating secure and reliable technology solutions for the legal industry.
🎯 The Role
This is a hands-on role with real ownership. You’ll administer our Microsoft 365 and Entra ID environment, look after a mixed fleet of macOS and Windows devices, and automate as much of the day-to-day as possible — from identities and access to endpoints — as we scale. Because our team includes developers with their own setups, there’s room to grow the role toward supporting developer machines and infrastructure tooling too.
✅ Key Responsibilities
Administer and optimize our Microsoft 365 / Entra ID environment — identities, groups, licensing, and access.
Manage our heterogeneous endpoint fleet (macOS, Windows, and developer Linux machines) — setup, patching, and support.
Own and improve single sign-on — deciding where it applies, and building and maintaining integrations for our tools.
Automate a large share of our IT operations — scripting and tooling (e.g., Python, Ansible) to take manual, repetitive work off the table and eliminate configuration drift. This is central to the role, not an afterthought.
Handle onboarding and offboarding — provisioning accounts, devices, and access, and cleanly revoking them (ideally automated).
Support developers and their machines, and help manage infrastructure tooling where it overlaps with IT.
Support our security and compliance posture — access reviews, MFA, and audit-relevant records (e.g., ISO 27001, C5, TISAX).
Document IT processes and maintain the asset and access inventory.
📌 Required Qualifications
Microsoft 365 & identity: Hands-on experience administering Microsoft 365 and Entra ID — user lifecycle, groups, licensing, and access management.
Heterogeneous environments: Comfortable supporting a mixed device fleet — macOS and Windows endpoints (including some Windows desktops). Experience with Linux is a nice-to-have (largely developer machines in our case).
Single sign-on (SSO): Solid general understanding of SSO — where to apply it, the concepts behind it, and common integration paths (e.g. SAML / OIDC).
Automation-first mindset: A big part of this role is automating a lot of what would otherwise be manual work— you reach for scripts and tooling before doing things by hand. Scripting experience is important; Python is a nice-to-have.
Configuration management: Experience with Ansible — particularly valuable if the role also supports developer machines and infrastructure setup
Location:Berlin-based, able to be on site as needed for hands-on device and hardware support.
🎁 Benefits
Hybrid: Berlin-based role with flexible remote days (some on-site presence needed for hands-on device and hardware support).
Working hours: Flexible working hours.
Vacation: 26 days + December 24th & 31st off, + 1 additional vacation day per year of employment (up to 30 days).
Discounts: e.g., Urban Sports Club membership, depending on location.
Equipment: Laptop (Lenovo or Mac), plus home-office setup budget (paid with your first salary).
🛂 Visa & Eligibility
No visa sponsorship is mentioned in the job description.
