SAO MARTINHO
Otopeni, Romania, RO
15/07/2026
EarlyCV
About the role:
This is not a help-desk seat and it is not a junior cloud role. You will personally own the entire IT and internal software function for a company operating across four countries: the infrastructure, the security, the network, the end-user experience, and the custom software the business runs on. You will be expected to design it, build it, secure it, support it, document it, and improve it.
What you will own:
Endpoint & Mobility
• Full lifecycle management of every laptop and mobile device through Microsoft Intune: configuration policies, app deployment, compliance, and settings, authored from scratch.
• MDM enrollment and management of mobile fleets, including Microsoft Tunnel for secure mobile access.
Cloud & Infrastructure
• Own the Azure cloud infrastructure end to end.
• Design and maintain secure remote access: Azure Virtual Network Gateway VPN and a RADIUS server you are expected to run and troubleshoot yourself.
Network
• Administer all network equipment across sites, spanning a legacy Fortinet estate and a newer UniFi deployment, with no separate network team to lean on.
Security
• Monitor and respond to security incidents, and continuously author and harden security policy. You are the security function, not a ticket-forwarder to one.
End-User Support (L1 to L3)
• Provide support to the entire company across four countries and multiple languages, escalating to no one because you are the escalation point.
Internal Software Development
• Design, build, ship, and maintain production internal applications used daily by non-technical departments. Current examples built single-handedly include an IT ticketing system, an IT asset-management platform, and a shuttle-request app for Operations.
• Act as an internal software partner to other departments: turn vague, non-technical business problems into deployed, working tools, and stand up the infrastructure those teams need to build their own.
AI-Driven Automation
• Independently design and deploy AI-powered automations (using tools such as Claude) that measurably increase efficiency for IT and for departments in the the Group.
Knowledge & Continuity
• Document, train, and mentor, including building up other staff to extend your reach, while still personally carrying the full workload.
Must-have requirments:
• 5+ years operating simultaneously as a systems administrator, cloud engineer, network engineer, security practitioner, and software developer. Not sequentially. At the same time, in the same role.
• Proven solo, greenfield implementation in production of Intune, RADIUS, Azure VPN, and Microsoft Tunnel. “Familiarity” or “exposure” does not qualify; we mean you built it alone, from nothing, and it is still running.
• A portfolio of internal production applications you personally designed, coded, shipped, and still maintain, that non-technical colleagues depend on every day. Full stack, full lifecycle, one person.
• Demonstrated ability to independently build AI-driven automation that serves departments outside of IT.
• Fluency in translating non-technical business needs into deployed software without a product manager, a business analyst, or a spec.
• Ability to support a multi-country, multilingual user base alone, balancing Romania, Portugal, Hungary, and Austria.
• Comfort being a genuine department of one: setting strategy and crimping cables in the same afternoon, with no supervision and no ramp-up.
• Romanian and English required.
.png?1771558658){kind=logo}