Inženýr systémů a bezpečnosti

Job Description

CrossBoundary team is recruiting a full-time Systems & Security Engineer to join our Digital Core and Innovation (DCI) team. We are seeking a resourceful, innovative, and creative problem-solver to implement solutions in response to the organization's evolving technology and security needs.

The Systems & Security Engineer will own and advance the organization's end-to-end security posture, design and maintain secure cloud and hybrid infrastructure, and build automation-driven endpoint and application delivery capabilities across macOS, Windows, Android, and Apple mobile platforms. This role requires a comprehensive understanding of modern security architecture, cloud infrastructure engineering, scripting/automation, and operational excellence.

The Systems & Security Engineer will join the DCI team and report to the Senior IT Manager, partnering closely with stakeholders across IT Compliance, Information Security, and Solution Delivery teams to implement the firm's security objectives and long-term infrastructure strategy.

Why join us?

CrossBoundary operates in frontier markets that also hold immense investment opportunities. The chosen candidate will play an important role in a unique team with the opportunity to make a large impact. Team members come from diverse backgrounds, but share several qualities: curiosity, humility, integrity, a drive for excellence, and a bias for action.

What you will do

Your primary responsibilities will be:

• Security Engineering & Governance
  • Continuously improve CrossBoundary's security posture across cloud, endpoint, identity, data, network, and application layers.
  • Implement and enforce zero trust principles, including identity governance, conditional access, privileged access, and secure API integrations.
  • Manage endpoint detection and response (EDR), security baselines, and system hardening.
  • Implement data protection and governance initiatives, including DLP and information protection.
  • Serve as the technical security lead during security incidents, from investigation to remediation.
  • Deliver clear, executive-ready incident summaries and improvement recommendations.
  • Conduct application and infrastructure security risk assessments for existing and new systems.
  • Lead security awareness training sessions across CrossBoundary Group.
• Cloud & Infrastructure Engineering
  • Design, deploy, and manage Microsoft Azure environments, including Azure tenancies, Azure Virtual Desktop, and Cloud PCs.
  • Engineer and operate secure, scalable cloud and hybrid infrastructure across Azure and AWS.
  • Build and maintain core infrastructure services (e.g., server builds, file services, DHCP) in cloud and on-prem environments.
  • Support infrastructure lifecycle activities, including new deployments, migrations, upgrades, and performance optimization.
  • Partner with senior stakeholders to design and recommend systems architecture, and maintain technical documentation, standards, and best practices.
  • Ensure all solutions meet security, performance, scalability, and reliability requirements.
• Device & Application Management
  • Manage unified endpoint management across Windows, macOS, Android, and Apple mobile platforms using Microsoft Intune.
  • Standardize device configurations, compliance, patching, and software deployment.
  • Leverage AI, telemetry and automations to improve operational efficiency thus reducing reactive support through self-healing configurations, and proactive remediation.
  • Design, package, and deploy enterprise applications using cloud-based delivery solutions.
  • Support application delivery across Windows environments, Citrix platforms, and Azure services.
  • Troubleshoot complex application and infrastructure issues in collaboration with cross-functional teams.
  • Apply a DevOps and Infrastructure-as-Code mindset, with exposure to Terraform, CI/CD pipelines, and repeatable deployments.

Who You Are

• Excellence: You demonstrate and maintain the highest personal standards, continually pursuing opportunities for improvement. You are not afraid to get your hands dirty to untangle a complex issue.
• Curiosity: You investigate signals, telemetry, and patterns to understand root causes and prevent recurrence. You enjoy staying current with threats, emerging technologies, and engineering best practices.
• Bias to Action: You don't wait to be asked to add value. You are comfortable with ambiguity, accountable for outcomes, and can operate without direction in a fast-moving environment.
• Integrity: You set your standards above the minimum required for compliance where necessary to deliver an excellent project. Creative, upholds ethical standards and values.
• Collaborative: You work effectively across teams, translating complex technical inputs into clear decisions and actionable plans.
• Deliberate: You choose simple, robust designs over unnecessary complexity and communicate trade-offs with clarity.

Required Qualifications

• BSc degree in Computer Science, Information Technology, Engineering, or related discipline is required.
• At least one professional certification in information security such CISSP or CISM is required. Microsoft Endpoint Administrator, Cloud and CCNP Security certifications are advantageous.
• 5+ years of infrastructure engineering experience with strong scripting and automation experience (PowerShell, Bash and/or Python).
• Demonstrated experience designing and supporting complex systems and applications, including rolling out new systems, maintaining, migrating, upgrading, and improving long-term performance.
• Strong understanding of network infrastructure, troubleshooting methodologies, and hardware stacks.
• Experience with cloud resource provisioning, configuration management, and orchestration e.g., Azure.
• Experience implementing and operating enterprise security controls across Microsoft Defender, Entra, Purview, and endpoint security tooling.
• Experience securing AI platforms, APIs and third-party SaaS integrations.
• Practical experience with system security vulnerabilities, remediation techniques, penetration testing, intrusion detection and prevention, attack vectors, and hacker culture.
• Good understanding of web application technologies, protocols, and security, coupled with knowledge of scripting languages and automation experience.
• Expertise in network security, including VPN, Firewall, URL filtering, network monitoring, Cloud, intrusion detection, application security, and wireless security.
• A strong grasp of endpoint security solutions, including File Integrity Monitoring and Data Loss Prevention.
• Familiarity with Security Information and Event Management (SIEM) such as Microsoft Sentinel.

Location

Candidates may join our team in one of CrossBoundary's global office locations, pending local work authorisation. Locations include Accra, Bogota, Cape Town, Dubai, Dakar, Freetown, Johannesburg, Lagos, London, Lubumbashi, Mauritius, Mumbai, Nairobi, Washington D.C.

Interested in applying?

Think you have what it takes but not sure you check every box? Research shows that while men apply to roles when they meet an average of 60% of the criteria, women often only apply when they meet every requirement. If you're passionate about what we're building, we want to hear from you!

Equal Opportunity Employer

CrossBoundary is an equal-opportunity employer. If you need assistance and/or reasonable accommodation due to a disability during the application or the recruiting process, please send a request to [email protected].