Blue Diamond Asset Management is a hedge fund management company based in Zug, Switzerland and an affiliate in Singapore, that focuses on systematic relative value volatility strategies.
We are looking for a talented and passionate ICT Operations Engineer (100%) to join the growing IT Infrastructure & Security team that lies at the heart of the business.
This role sits at the intersection of operations and engineering, with an increasing focus on automation, security, and hybrid architecture. You will gain deep exposure to both traditional infrastructure and modern cloud-integrated environments and work across our offices, data centers, cloud services, and private connectivity environments, contributing directly to stability, security, and performance.
Your daily challenges
- Operate and continuously improve our hybrid IT infrastructure across on-premises data centres, Azure, and our offices
- Monitor system health, investigate alerts, and ensure timely resolution of incidents and service requests
- Troubleshoot complex issues across systems, networking, and identity layers
- Ensure continuous IT operations and support in close collaboration with the team, including occasional availability outside standard business hours
- Plan and execute maintenance activities such as patching, upgrades, and lifecycle management
- Support change management processes with a structured and risk-aware approach
- Collaborate closely with engineering and development teams on infrastructure improvements
- Maintain and enhance monitoring, logging, and event management capabilities
- Support hybrid identity and workplace environments (on-premises Active Directory and Entra ID)
- Ensure reliable and secure connectivity across international sites and partners, including private interconnects
- Identify operational improvements and contribute to automation and standardization initiatives
What you bring to the table
- At least 3 years of experience operating enterprise IT infrastructure within a small but highly mature and well-established IT environment, with a strong focus on Microsoft technologies; familiarity with Linux environments is a plus.
- Solid expertise in Active Directory, DNS, Group Policy, and hybrid identity setups
- Hands-on experience with Microsoft 365, Intune, SCCM, endpoint management, including updates, patching and software packaging
- Experience with virtualization platforms, such as VMware ESXi
- Strong understanding of networking fundamentals, including TCP/IP, routing, switching, DNS, and network segmentation
- Practical experience with VPN technologies, firewalling, and secure connectivity design (site-to-site, remote access)
- Experience with enterprise firewalls
- Familiarity with monitoring, ideally with PRTG and Opvizor
- Understanding of storage integration, backup, and recovery concepts
- Strong security mindset with a clear understanding of operational impact in sensitive environments
- Structured troubleshooting approach with strong analytical thinking
- Fluent in German & English
Technologies we are using
- Operating Systems & Platforms: Windows Server / Clients, Linux (Debian, RedHat), VMware ESXi, Microsoft Hyper-V
- Identity & Workplace: Active Directory (DNS, DHCP, GPO, CA, RDS), Entra ID, Intune, SCCM and Microsoft 365
- Cloud & Security: Microsoft Azure, Microsoft Defender ecosystem, Arctic Wolf
- Networking & Connectivity: Cisco, Aruba, Fortinet, VPN, private connectivity (Equinix Fabric, site-to-site), Azure ExpressRoute, Azure vWAN
- Data Protection & Infrastructure: Veeam, on-premises data centres (Zurich region)
What we value
- Ownership and accountability for systems and services
- A structured and precise working style
- Strong problem-solving persistence and quality focus
- Service-oriented mindset with clear communication
- Interest in security, resilience, and zero trust principles
- Ability to work independently while contributing to a small, highly effective team
What we offer
- Annual bonus programme
- Generous pension contribution
- Social events, international team and knowledge sharing
- 5 weeks of vacation
- Office within walking distance from Zug train station
- Two days per week of remote work
- A 38′′ monitor for remote work
- Complementary coffee, outstanding coffee machine
- Standing desks available