IT and Network Manager

We are seeking an experienced, hands-on IT and Network Manager to take end-to-end ownership of Celeste's internal IT systems, networks, and business software platforms. As a growing technology startup, Celeste offers a highly flexible environment where this role will actively contribute to structuring and shaping the company's IT foundations, rather than operating within rigid, pre-defined corporate frameworks.

The role is responsible for designing, securing, and operating the company network and IT infrastructure, supporting both R&D activities and day-to-day business operations, while enabling efficient and secure work both on-site and remotely. A key aspect of the position is the definition, implementation, and continuous improvement of company-wide IT policies, including identity, access, device configuration, and software usage.

The IT and Network Manager will also own the administration of core SaaS and business platforms (e.g. collaboration suites and ERP/business applications), ensuring reliability, security, and alignment with evolving company workflows. We are looking for someone motivated, pragmatic, and proactive, eager to bring ideas, build sensible solutions, and grow alongside the organization.

Responsibilities:

• IT Infrastructure & Networking
• Design, implement, and maintain secure, scalable company networks with appropriate segmentation, access control, and monitoring.
• Define and enforce network policies tailored to different departments and use cases.
• Maintain accurate documentation of network topology, configurations, and operational procedures.
• Ensure network performance, resilience, and security best practices.
• Endpoint & Device Management
• Define, deploy, and maintain a standardized software stack for company laptops and personal devices (macOS, Linux, Windows).
• Plan, automate, and monitor software updates, patches, and system configurations.
• Provide troubleshooting and operational support for company-managed devices.
• Identity, Access & Company Policies
• Define and enforce policies governing user identities, access rights, and permissions across systems and applications.
• Implement technical controls and automation to ensure consistent policy enforcement.
• Manage identity and access systems and integrations across infrastructure and SaaS platforms.
• Business Applications & SaaS Management
• Own the administration of company business software platforms (e.g. ERP, collaboration and productivity tools).
• Manage backend configuration, user roles, permissions, workflows, updates, and integrations.
• Provide troubleshooting, maintenance, and continuous improvement of these platforms.
• Experience with platforms such as Odoo is a plus; experience managing comparable business software environments is fully acceptable.
• Collaboration & Productivity Platforms
• Administer and maintain collaboration suites (e.g. Microsoft 365), including:
• License management and assignment
• Policy definition and enforcement
• Security and compliance settings
• User support and troubleshooting
• Backup, Recovery & Operational Continuity
• Define and maintain backup and recovery strategies aligned with business and compliance requirements.
• Ensure backup availability, integrity, and regular recovery testing.
• Contribute to operational continuity and disaster recovery planning.
• Vendor & System Ownership
• Act as the technical owner for internal IT systems and external IT service providers.
• Evaluate, introduce, and evolve tools and platforms as company needs grow.

Required Qualifications:

• Bachelor's or Master's degree in Computer Science, Telecommunications, or a related field
• Strong expertise in networking, topology design, and network security
• Advanced Linux system administration skills
• Proven experience with backup and recovery strategies and tools
• Experience managing IT environments across macOS, Linux, and Windows
• Experience administering business software platforms and SaaS environments (e.g. ERP, collaboration suites)

Preferred Qualifications:

• Scripting and automation skills (Bash, Python, or similar)
• Experience with identity and access management systems (LDAP, Kerberos, FreeIPA, Active Directory, or similar)
• Knowledge of certificate authority (CA) infrastructure
• Familiarity with containerization and virtualization technologies (Docker, KVM, Incus)