Own & operate our IT infrastructure: self-hosted servers, storage, networking, backups, and availability, Ensure data sovereignty for sensitive research and IP data, Microsoft 365 & Azure administration: tenant, Entra ID, applications, and operations, Device management (Intune or equivalent) for laptops & smartphones (BYOD), clean onboarding/offboarding, Set up and operate VPNs and secure remote access, Linux server operations, including SLURM cluster for DFT compute (WEASEL/ORCA) and tested disaster recovery, Continuous IT security monitoring, system hardening, access control, and audit-grade traceability, Prepare software and infrastructure cost comparisons for management decisions, Act as the central IT point of contact across the company, manage AI access (tokens, budgets) and serve as an internal AI point of contact