Modern Workplace Engineer

About Tresorit:

We believe that professionals in all organizations should have a secure and easy way to collaborate with their sensitive and confidential information. We provide a platform for departments, teams and solo entrepreneurs, equipping them with secure solutions to engage efficiently with their coworkers, customers, and other organizations. 

Role purpose:

The Modern Workplace Engineer is responsible for owning and advancing Tresorit’s secure end-user computing environment, ensuring a seamless, resilient, and security-first digital workplace experience. The role combines engineering expertise across the Microsoft Modern Workplace stack with operational accountability for endpoint management, SaaS governance, and user support.

A key focus of the position is maintaining continuous audit readiness in alignment with ISO 27001 and NIS2 expectations, particularly across asset management, identity-driven access controls, and service lifecycle governance. The role ensures that all workplace technologies, devices, and SaaS services are managed in a standardized, compliant, and cost-efficient manner, while supporting business agility.

Acting at the intersection of engineering, operations, and governance, the Modern Workplace Engineer drives both platform maturity and day-to-day service excellence, with a strong emphasis on Zero Trust principles and secure-by-design operations.

Primary responsibilities

• Delivery
• • Own and continuously evolve the Modern Workplace/EUC ecosystem, with a strong focus on Microsoft technologies (Intune, Autopilot, Entra ID, M365 E5 stack) in a hybrid environment.
  • Participate in the implementation and maintenance of secure endpoint management capabilities, including provisioning, configuration baselines, compliance enforcement, and device lifecycle automation.
  • Establish and maintain end-to-end asset management processes (hardware and software), ensuring accuracy, traceability, and compliance with ISO 27001 and NIS2 requirements.
  • Drive SaaS governance practices, including maintaining a centralized SaaS inventory, ensuring visibility of usage, ownership, integrations, and associated risks.
  • Manage licenses and subscriptions across M365 and other SaaS platforms, including allocation, optimization, renewal tracking, and cost control, while supporting billing and financial reconciliation processes as required.
  • Ensure continuous audit readiness by maintaining high-quality documentation, evidence collection, and process adherence across workplace services, assets, and SaaS platforms.
  • Actively manage and prioritize the operational support queue, ensuring efficient handling and resolution of incidents, service requests, and user issues with a strong focus on user experience.
  • Provide advanced troubleshooting and root cause analysis across endpoint, identity, and SaaS-related issues.
  • Leverage Jira and Confluence at an advanced level to standardize workflows, enforce process consistency, maintain structured knowledge bases, and support reporting and audit traceability.
  • Collaborate with Security and Infrastructure personnel and other engineering teams as required to enforce Zero Trust principles, including strong authentication, conditional access, endpoint compliance, and least privilege access models.
  • Contribute to the design and enforcement of workplace security baselines and policies aligned with Tresorit’s overall security posture and regulatory obligations.
  • Support integration with broader infrastructure components, including Azure IaaS environments and network solutions (e.g., Meraki), ensuring seamless and secure connectivity.
  • Continuously identify and implement automation and optimization opportunities across workplace operations, onboarding/offboarding, and service delivery processes.

• Collaboration:
  
  • learn the different points of view of each team member and exert a win-win solution when collaborating
  • learn the different points of view of the departments and exert a win-win solution when collaborating

• Process improvement:
  • throughout the operative assignments and/or projects/tasks execution processes, to look for and communicate possibilities of changes to enhance the function’s performance, increase productivity and inner customer satisfaction, in line with company goals

• Self-leadership:
  • have a personal vision and work for it day by day in co-operation with the team leader
  • learn continuously about the professional field and the company’s business-, functional- and people-oriented knowledge and events
  • self-assessment and communication to the team leader of professional and human needs (behavior, emotions, thoughts) to achieve continuous high performance
  • Enhance department and organization reputation by accepting ownership for accomplishing new and different requests on time, exploring opportunities to add value to job accomplishments
  • Report progresses and critical issues to the team lead and/or affected departments
  • Interact effectively with other company leaders, teams and stakeholders to collectively meet business goals and growth objectives
  • Prepare ad-hoc tasks upon his/her superior’s, and only superior’s request
  • Learn to communicate professional information into sound business language so people of all levels can understand.
  • Protect organization's value by keeping information confidential.

Desired qualifications and skills:

• Strong hands-on experience (>5y) with Microsoft Modern Workplace technologies (Intune, Autopilot, Entra ID, M365 ecosystem, ideally E5 capabilities).
• Proven experience in endpoint management, device lifecycle automation, and policy-driven configuration in a security-conscious environment.
• Solid understanding of asset management, SaaS governance, and license/subscription management practices in enterprise environments.
• Practical experience with audit and compliance frameworks, particularly ISO 27001 and familiarity with NIS2 expectations.
• Working knowledge of ITIL v3 principles (certification is not required, but operational experience is expected).
• Advanced expertise in Jira and Confluence, including workflow design, process standardization, and documentation governance.
• Experience with Azure IaaS and cloud infrastructure concepts is an advantage.
• Familiarity with Meraki networking environments is a plus.
• Strong analytical and troubleshooting capabilities, with the ability to investigate and resolve complex, cross-domain issues.
• Ability to balance engineering ownership with operational responsibilities, including active queue management and user-facing support.
• Strong communication and stakeholder management skills, with the ability to operate across technical and business domains.

KPIs:

• Reporting/data accuracy
• Deadline accuracy

Scope of authority:

• Learning & development budget: self-assessment

Required Competency

1. System thinking

• • Strategic/operational thinking – sees over the area's and team's goals and elements affecting his/her tasks as well as the ones that his/her task has effect on.
  • Proactivity – executes his/her tasks by keeping in mind the possibilities and risks and acts by taking advantages of/avoiding those.
  • Decision making – makes decision after taking into consideration and evaluating most potential factors, chooses the best option, communicates the reasons to the stakeholders, and stays consequent to it.

2. Efficiency & result orientation

• • Planning & organization – executes his/her tasks in time with the adequate prioritization.
  • Reliability – one can count on him/her both professionally (quality and quantity of the work, deadlines) and personally (co-operation).
  • Delegation – asks for help from his/her colleagues and superiors, if needed.

3. Teamwork

• • Inspiration – his/her passion is inspiring his/her colleagues.
  • Assertiveness, empathy – recognizes and handles the situations that expect assertiveness or empathy/bringing the other to the fore.
  • Honesty & Support – through help he/she provides support to his/her colleagues.

4. Ownership & drive

• • Responsibility – takes responsibility for his/her work and its result.
  • Drive – is ready to drive actions to reach high professional standards.
  • Impact – his/her presence, behavior and work have a good impact on the progress of the results and on the co-operation with the colleagues.

5. Growth mindset & development

• • Curiosity, openness – he/she considers the changes as an opportunity to learn and grow that can benefit his/her professionalism and him/herself, as well.
  • Self-development – searches the opportunities for professional development.
  • Change management – follow the new expectations caused by the change with commitment.

What we offer:

Competitive base salary with a wide range of extra benefits, like:

• • Cafeteria-system,
  • annual bonus,
  • private health insurance plan,
  • gym subsidies,
  • free mobile subscription,
  • learning and self-development opportunities,
  • flexible working hours & hybrid working conditions,
  • paid parental leave,
  • in-office snacks & beverages,
  • team building days.

How to apply:

Get started by clicking "Apply now" and attaching your resume for consideration. We encourage you to apply even if you believe you do not meet every single qualification. Many excellent candidates do not check every box, and that is okay. We are happy to recognize the potential in motivated people, and work in an environment where we can grow and learn together.