IT Workplace Engineer (GRC Automation & Security)

Quick Facts

• Focus: secure workplace engineering with GRC automation and security
• Level: mid-to-senior; multiple years of relevant experience

Description

You will help design, operate, and continuously improve a secure, user-friendly digital workplace, with an emphasis on GRC automation and workplace security. The role includes integrating security and governance into platform, configuration, and operational processes, and automating controls, security baselines, and compliance rules. You will also translate requirements such as DORA into practical, as-automated-as-possible evidence and policies.

Role Description / Responsibilities

• Build, run, and evolve the workplace platform, including endpoints, applications, identities, and access management
• Integrate security and governance into platform, configuration, and operational processes
• Implement and automate controls as code via security baselines, configuration standards, and compliance rules/policies
• Automate user and permission management, software distribution, and device lifecycle management
• Continuously monitor endpoint security posture and compliance; assess vulnerabilities and misconfigurations and remediate with stakeholders
• Convert DORA and similar regulatory requirements into concrete technical evidence and policies
• Create maintainable documentation and proof artifacts that do not require constant manual upkeep
• Consult business areas, Service Desk, Information Security, Data Protection, and Governance
• Evaluate new workplace technologies regarding security, operational capability, usability, and regulatory requirements
• Support other workplace topics and contribute expertise in security and GRC automation

Requirements

• Degree in Computer Science, comparable education, or proven professional experience
• Strong experience engineering/operating modern workplace environments, especially Microsoft 365 and Entra ID
• Experience with device management, software distribution, and patch management (e.g., Microsoft Intune; ideally Windows Autopilot)
• Endpoint security/EDR experience (e.g., Microsoft Defender or comparable)
• Solid understanding of IAM, Conditional Access, and role/permission models
• Practical automation experience with APIs and scripting (PowerShell, Microsoft Graph, Python); ideally also IaC/Configuration as Code
• Experience implementing automated technical checks, security baselines, and/or compliance policies
• Ability to translate regulatory/organizational requirements into implementable technical solutions
• Strong operational mindset (stability, supportability, maintainability, and user experience)
• T-shaped profile: deep security/GRC automation focus with willingness to support broader team goals
• Multiple years of relevant professional experience (mid-to-senior)
• German proficiency at C1 level