Senior Systems Enginner

How you'll contribute

• Administer Microsoft 365 across Entra ID, Exchange Online, Teams, OneDrive and SharePoint, including identity governance, Conditional Access, MFA, SSO, mail flow, permissions and external sharing.
• Manage Microsoft 365 security and data controls, including Defender, Purview, DLP, sensitivity labels, retention, eDiscovery, audit logs and secure SharePoint data design.
• Manage Windows devices through Intune and Autopilot, and Mac devices through Iru (formerly Kandji), including compliance, applications and endpoint security.
• Manage Microsoft 365 licensing. Understand which capabilities come with each licence, where add-ons are needed, and when a lower-tier licence with add-ons makes more sense than moving to a higher tier.
• Use PowerShell, Microsoft Graph, APIs and Power Automate to integrate systems, automate administration and reporting, streamline access reviews and improve repeatable business processes.
• Design, integrate and securely roll out AI-enabled solutions across Microsoft 365 and wider business workflows, including data readiness, permissions, DLP, sensitivity labelling, governance, user adoption and operational controls.
• Assess where AI or automation is appropriate, compare native and custom approaches, and implement solutions that are secure, supportable and proportionate to the business need.
• Support Azure virtual machines, permissions and basic networking, alongside backup, recovery and service incidents.
• Actively manage projects and changes you own using project-management disciplines: define scope, milestones and deliverables; develop realistic estimates and timelines; maintain project plans; manage dependencies, risks and mitigations; coordinate stakeholders and vendors; track progress against plan; and escalate blockers, slippage or threats to delivery early.
• Review delivery performance as work progresses and adjust plans, sequencing or resourcing recommendations where needed to keep outcomes on track.
• Assess software risks and contribute to security certification processes.
• Identify areas for technical and process improvement, propose practical changes and help shape priorities within the IT function.
• Communicate technical concepts, risks and recommendations clearly to stakeholders, adapting the level of detail and approach to the audience and seeking commitment to agreed actions where necessary.
• Track work, decisions and progress in tickets. Use AI to draft and update comprehensive documentation of systems, changes and procedures in the IT wiki, checking the final content yourself.
• Open and manage vendor support tickets when they are the fastest route to an answer, progressing other work while awaiting a response. Use AI for preliminary advice where appropriate and verify recommendations before making changes.
• Resolve complex support issues autonomously, provide limited cover when the support engineer is unavailable, and mentor them informally through knowledge sharing, feedback and practical coaching.

You should apply if you can demonstrate...

• A proven record as an experienced Microsoft 365 practitioner, with deep hands-on knowledge and the ability to resolve complex issues and deliver changes independently.
• Strong working knowledge of Purview, DLP, SharePoint permissions and secure data design.
• Good working knowledge of Mac management, alongside practical Intune and Autopilot experience.
• Sound security judgement, experience assessing software risks, and working knowledge of Azure virtual machines, permissions and basic networking.
• Practical PowerShell skills, with existing hands-on experience using Microsoft Graph, APIs and/or Power Automate to integrate systems and automate processes.
• Existing hands-on experience integrating AI tools into Microsoft 365 or wider business workflows, including the ability to assess suitability, design the approach, implement it securely and own the operational outcome.
• Working knowledge of AI-related data governance, permissions, DLP, sensitivity labelling and information-security implications.
• Familiarity with Microsoft 365 licensing tiers and add-ons, with the judgement to recommend cost-effective combinations based on required capabilities.
• **Active project-management capability:** you can create clear, pragmatic and manageable plans for successful delivery; define scope, milestones and deliverables; develop realistic estimates and timelines; maintain a live plan; manage dependencies, risks and mitigations; coordinate stakeholders and vendors; monitor progress against plan; and adjust or escalate early when delivery is at risk.
• **Autonomy at senior level:** you can work independently on complex technical and delivery issues, seeking sense-checks or escalation for unusually complex, high-risk or strategically significant decisions rather than relying on others to structure the work or determine the solution.
• **Stakeholder influence:** you can communicate purpose, options, risks and recommendations clearly, handle challenge constructively and build commitment to agreed technical outcomes.
• **Continuous improvement:** you identify opportunities to improve services, processes and controls, propose practical changes and bring relevant technical issues into wider planning and prioritisation.
• Strong personal organisation: you capture commitments, seek clarity on priorities, maintain your own backlog and communicate progress proactively.
• A record of delivering agreed outcomes on time and within budget or resource constraints, while revising plans openly when circumstances change.
• A willingness and ability to develop others by sharing expertise, giving practical feedback and supporting colleagues’ learning within your subject-matter area.

What's in it for you?