Platform Engineer
Across both halves, you automate. Every task you do twice should become a script. You use Claude to write those scripts, and you know how to check what it produces before it touches a laptop, an account or a server.
What is solid. The platform is deployed with Ansible, every instance follows the same model, and workstations are already managed centrally: nobody is local administrator of their own machine. Security and compliance are part of how the company works, because our customers are CISOs and they look closely.
What remains to build. There is no single, up-to-date view of which tools we use, who has access to what, and who owns each tool: building it is one of your first deliverables. Onboarding and offboarding exist as checklists and workflows, not yet as automation. Monitoring tools are in place, and making sure the right alerts reach the right person is part of your job.
Internal IT (about 50%)
Administer Microsoft Entra ID, Microsoft 365 and Intune: users, groups, licences, conditional access, device policies.
Manage the laptop fleet (Mac, Windows, Linux): purchase, enrollment, updates, repair, return.
Manage our meeting room system
Buy and manage office tech equipment, within a budget.
Support employees on their applications: diagnose, fix, and document the fix so it does not come back.
Own the technical side of onboarding and offboarding: accounts in every tool on day one, every access removed on the last day, with a trace. These workflows are audited for our ISO 27001 certification.
Run the internal support tool, and keep the inventory of tools, accesses and owners up to date.
Platform (about 50%)
Manage the customer instances: provisioning, configuration, keeping them consistent with each other, decommissioning.
Run vulnerability scans on a schedule, across Linux servers, containers and dependencies, and across the Windows and Mac workstations.
Keep everything patched: track the CVEs the scans and advisories report, decide what is urgent, and roll the patches out without breaking the service or the employees' day.
Keep them up: monitoring, backups checked, incidents handled.
Network, firewalls, VPN and access to production: who can reach what, how, and with what trace.
Contribute to the infrastructure code (Terraform, Ansible, Docker) and to the deployment pipeline.
Make monitoring useful: an alert that fires has a recipient and an action.
Take part in a small on-call rotation, being defined with the team.
Everywhere
Automate. Account creation, laptop setup, access reviews, vulnerability scans, patch rollouts, routine checks on the servers: if it is repeated, it becomes a script, and the script is reviewed, versioned and documented.
Télétravail hybride possible : des bureaux à Lyon, à un arrêt de métro de la place Bellecour
10 à 13 jours de RTT par an
Mutuelle prise en charge à 70 %
Carte-repas Swile : 9 € par jour, financée à 60 % par l’entreprise
Panier de fruits hebdomadaire offert
Forfait mobilités durables : 40 € par mois
Afterworks, séminaires et team buildings
Must-have
Take satisfaction helping your colleagues and setting them up for success. You know how important a smooth IT set up is for the workplace experience and productivity.
Strong knowledge in Azure: Entra ID (Azure AD), conditional access, Intune and Microsoft 365 administration. You have run a company's tenant, not only used it.
Expert in Linux: you have administered production Linux servers over time, kept them up, secured and patched them, and debugged them when they failed.
Strong knowledge in networking, firewalls and VPN: you have designed and run firewall rules and VPN access for real users and servers, and you can explain who could reach what, and why.
Expert in monitoring: you have built monitoring and alerting that people actually relied on, and you can explain what you chose to alert on and what you chose not to.
You automate with Claude: you have used it to write scripts that run in production or on real users' accounts and machines, and you can show what you checked before running them.
What counts as much
A security mindset: least privilege, traceability, access reviews.
Vulnerability management in practice: you have run vulnerability scans on Linux servers and Windows workstations, prioritised the CVEs they found, and patched on a schedule, not only when something broke.
Scripting in PowerShell, Bash or Python.
You explain technical things to non-technical colleagues without making them feel slow.
Not required
Deep experience with our exact stack (Terraform, Ansible, Docker Swarm): it can be learned.
A cyber or compliance background: the domain can be learned too. Having lived through an ISO 27001 audit is a real plus.
Phone call with Richard, HR Director (30 min).
Culture interview with Damien, our CTO (45 min).
Technical interview with a member of the team and the CTO (1 h). Bring a script you built with Claude and walk us through it: what it does, what Claude got wrong, and what you checked before running it. We will also go through real cases on Azure, Linux, networking and monitoring.
Meet the team
Final interview with Cyril, CEO & CoFounder