IT Support Specialist (System Administrator)

DBB Software — is a software engineering IT company from Ukraine with a unique point of difference. We provide an exciting concept involving highly trained and vetted remote software developers to provide businesses with everything they need in the information technology space. Whether it’s end-to-end IT or smaller, focused areas and individual projects, we cover it all, and our approach allows us to offer exceptionally competitive pricing.

During 10 years in the IT market, we successfully released more than 30 projects and have a wide geographic of clients in Europe, the USA, and Canada.

Now we continue to grow and extend our team so we warmly invite System Administrator to our team!

You will be the dedicated IT engineer for one of our long-term clients — a Swiss venture capital firm with ~50—65 employees and offices in Switzerland, Germany, and the UK. You will own their IT environment end to end: helpdesk, device fleet, identity and access, email security, and the security & compliance program — working directly with the client’s leadership and backed by the DBBS team. You will take over a mature, well-documented environment with established processes, KPIs, and admin manuals — including a structured one-month handover working side by side with the current engineer. This is a stable, long-term engagement — not a short project.

What we are expecting from new teammate:

— End-user support: run the IT helpdesk (Slack + shared mailbox) for ~50—65 users on macOS and Windows — accounts, MFA, mail clients, calendars, browsers, printers, and 30+ SaaS applications — meeting established KPIs (first response under 20 minutes, ~85% first-contact resolution).

-Onboarding / offboarding: own the full employee lifecycle — zero-touch laptop provisioning (Apple Business Manager / ADE for Mac, provisioning packages for Windows), account creation across 30+ services, MFA setup, day-one readiness, and clean deprovisioning with license reclamation.

-Workspace administration: administer a dual Google Workspace (primary) + Microsoft 365 / Exchange Online environment on a single domain — users, groups, shared drives and mailboxes, licensing, and hybrid mail routing.

-Email security: review quarantines in both Google and Microsoft consoles, triage phishing and respond to incidents, manage SPF / DKIM / DMARC records (Cloudflare DNS), and drive the rollout of a secure email gateway.

-Devices & assets: manage MDM policies (Hexnode) for the Mac / Windows fleet, enforce encryption and patching, build laptops remotely, and keep a serial-level inventory (Snipe-IT) across three offices.

-Identity & access: administer SAML SSO across 15+ business apps, enforce MFA everywhere, run the corporate password manager (1Password), and perform periodic access audits.

-Security & compliance: execute the client’s security program aligned with NIS2 / ISO 27001 — security policies, risk assessments, phishing-awareness training, and building out the incident response and backup / DR practices.

-Documentation: maintain admin manuals, employee guides, runbooks, incident reports, and short decision proposals — all in English, consumed directly by client executives.
-Vendors & tooling: evaluate vendors (POCs, pricing comparisons), optimize licenses and costs, and roll out new tools — including AI tools such as Claude Enterprise and ChatGPT Enterprise.

-Client communication: track and report IT KPIs and present progress at weekly / biweekly syncs with the client’s leadership.
 

What requirements are important for this role:
 

• Bachelor’s degree in Computer Science, Information Technology, or a related field.;
• 3+ years of proven experience as an IT System Administrator, IT Operations Specialist, or in a similar role.
• In-depth knowledge and hands-on experience with identity and access management systems, particularly Google Workspace and Microsoft 365.
• Experience managing Apple Business Manager, Windows Autopilot, Microsoft Intune, and other MDM (Mobile Device Management) solutions.
• Solid understanding of endpoint protection, device security, and remote device management.
• Familiarity with SaaS tools (e.g., Slack, 1Password, Dropbox, Mailchimp) and ability to manage SaaS lifecycles (procurement, approval, administration).
• Working knowledge of cloud infrastructure (Google Cloud, AWS, or Microsoft Azure).
• Strong analytical and troubleshooting skills with a proactive and solution-oriented mindset.
• Proficiency in automation and integration tools such as Zapier, Bardeen, or Apify.
• Experience writing IT documentation, process guides, and conducting user training sessions.
• Strong communication skills, including fluency in spoken and written English (B2/C1 level minimum).
• Ability to manage and prioritise multiple tasks or projects in a fast-paced, distributed environment.
• Solid understanding of data security, privacy, and compliance standards (e.g., GDPR, ISO 27001).
   

Working with our team is:

• Full-time, long-term position.
• Working hours: aligned with CET business hours (the client is based in Zurich; Ukraine is one hour ahead).
• Incident response: in the rare case of a critical incident, out-of-hours availability may be needed — in practice this happens once every several months, not as a routine.
• Competitive salary, discussed at the interview.
• Direct communication with client leadership; support and escalation backup from the DBBS team.
• A documented, KPI-driven environment with real ownership — your decisions shape the client’s entire IT landscape.