Working Student IT Operations

SPREAD builds engineering intelligence for the world's most complex products. Our AI-native platform gives automotive OEMs, defense primes, and industrial manufacturers a single source of product truth so engineering teams can make confident product decisions, fast. We work with companies like Volkswagen, BMW, Mercedes, Bosch, and Rheinmetall. Backed by HV Capital, DTCP, La Famiglia, and Salesforce.

You'll work hands-on with SPREAD's IT operations: Entra ID, Microsoft 365, and our Mac fleet. You'll need to get a real read on where things stand today, tighten up what's loose, and build the habits and documentation that keep it that way going forward. You own identity, endpoint, and device administration directly, handle end-user support and the full joiner-mover-leaver process, and work closely with InfoSec on the security requirements IT operations needs to meet.

Your Mission

• Administer Entra ID day to day, including accounts, groups, access assignments, and SSO/MFA configuration, cleaning up anything that doesn't look right rather than assuming it's correct.
• Own the full joiner-mover-leaver lifecycle, including passing through existing accounts to close out anything stale or orphaned.
• Manage the Mac fleet end to end: enrollment, configuration profiles, patching, and device lifecycle from procurement through secure retirement.
• Keep an accurate asset inventory of who has what, including warranty and lease status.
• Run first- and second-line end-user support, triaging and resolving tickets in Jira and building the self-service habits that keep the queue manageable.
• Administer Microsoft 365 and Exchange: mailboxes, distribution lists, licensing, and SharePoint/Teams permissions.
• Keep the compliance platform (Vanta) current from the IT side, resolving integration drift and keeping evidence fresh for ISO 27001, SOC 2, and TISAX audits.

Your Experience

• Real hands-on experience administering Entra ID and Microsoft 365, from a prior internship, working-student role, or coursework with genuine lab practice, not classroom theory alone.
• Light scripting and automation instinct, such as Claude Code or n8n.
• Comfortable auditing and tightening up an existing setup, not just maintaining a clean baseline handed to you on day one.
• Comfort troubleshooting everyday end-user issues and owning a ticket queue end to end.
• Exposure to Mac fleet or MDM management specifically.
• Basic ISO 27001 or audit-support experience, even as part of a team or through training
• Comfortable completing a background check and signing a confidentiality agreement, given this role's access to company systems and accounts.
• Based in Berlin and able to work on-site.
• German at B2 level or above, and fluent English.

Why SPREAD?

• Take real ownership of IT systems that need real attention, not a shadowing or ticket-queue-only role.
• Work directly with InfoSec and see how a real ISO 27001/SOC 2/TISAX program operates from the inside.
• Flexible hours built around your studies.
• Senior team prioritizing craft and accountability over hierarchy.
• Berlin office with meals provided 3 times a week.