Senior Systems & Fleet Infrastructure Lead - Remote UK

About Us SchoolGrid provides kitchen management software to primary and secondary Schools and Caterers across the public sector. We have a proven track record of increasing meal uptake, productivity and efficiency as well as reducing staffing and food costs along with food wastage. As a friendly and supportive team and we pride ourselves on maintaining an excellent track record of customer satisfaction, and we provide our staff with the time and support they need to succeed. We’re a fast-growing company who are seeking talented and passionate people to join us on our journey. Job Description This is a remote position. We're looking for a Senior Systems & Fleet Infrastructure Lead to take full ownership of our growing estate of commercial POS terminals and edge devices. You will be the senior technical authority for the whole fleet, from hardware sourcing and supplier negotiation through to remote fleet management, patching, and Cyber Essentials compliance. You will bridge low-level hardware procurement and cloud-based fleet operations, establish and run an RMM ecosystem, lead R&D on our embedded hardware platforms, design staged update pipelines, and enforce strict Cyber Essentials compliance across the whole terminal estate. Please note that we can only accept applications from UK based candidates and are unable to offer sponsorship for this role. Key Responsibilities Hardware sourcing, procurement & vendor management Lead the technical evaluation, prototyping, and procurement of embedded x86 motherboard platforms (currently Mini-ITX, Intel N150 SoCs). Audit OEM/ODM suppliers to verify active AMI Aptio V BIOS licensing, long-life Intel Extended Servicing Update (ESU) support, and 10-year BOM stability. Negotiate volume hardware pricing (1,000-unit batches), custom factory BIOS pre-configuration, and hardware warranty SLAs. Manage Product Change Notifications (PCNs), hardware revisions, and End-of-Life (EOL) transitions. Fleet management & staging automation (RMM) Establish an RMM platform (such as Intune, Atera, or NinjaOne) to monitor, inventory, and manage our fleet of Windows POS terminals. Build, test, and stage automated update packages (PowerShell scripts, UEFI Capsule .cab files, silent executable flashers). Enforce a strict 14-day patch SLA across all OS, firmware, and third-party software releases to maintain continuous Cyber Essentials certification. Design and roll out unique per-device or per-technician credentials, replacing the shared login currently used across the terminal estate. Manage disk encryption (BitLocker), remote recovery workflows, and automated system provisioning. Level-3 technical escalation & system architecture Act as the final technical escalation point for complex incidents that lower-tier technicians cannot resolve. Diagnose OS boot issues, UEFI Secure Boot key revocations, microcode updates, and remote recovery routines. Configure and harden Windows kiosk mode (Assigned Access) to prevent escape from the SchoolGrid application to the underlying OS or desktop. Identity, security & network governance Maintain endpoint compliance across Windows, Google Workspace / GCPW, and mobile device management (MDM). Audit local administrator privileges, host firewalls, and user account controls across all endpoints. Oversee office/site network connectivity, router configurations, VPNs, and firewall policies. Requirements Deep expertise in Windows 11 IoT, Enterprise deployment, Group Policy/registry tuning, BitLocker, and UEFI/BIOS settings. RMM fleet experience. Proven track record using enterprise RMM tools (such as Intune, Atera, or NinjaOne) to manage, patch, and script endpoints at scale. Advanced PowerShell scripting. Ability to write clean, production-grade PowerShell scripts for silent deployments, registry modifications, and BitLocker suspension workflows. General IT & networking. Solid understanding of TCP/IP, DNS, DHCP, VLANs, host firewalls, and remote access protocols. Basic Linux competency. Practical familiarity with Linux command-line tools (bash, systemctl, grep, dmesg, lscpu), and the ability to run firmware flash utilities (AFULNX, fwupd). Hardware & firmware understanding. Knowledge of x86 hardware architecture, embedded SoC thermal management (TDP), and AMI BIOS. 5+ years of experience in Infrastructure Engineering, Systems Administration, or Terminal Fleet Management. Direct experience preparing for or maintaining Cyber Essentials or ISO 27001 certification (Desirable). Proven commercial experience evaluating hardware suppliers and negotiating technical PO terms. Excellent verbal and written communication skills and confident in managing senior stakeholders. Benefits 40 days holiday (including bank holidays) because balance matters Remote first approach. Ongoing development opportunities, including mentoring from senior leadership Supportive, approachable team culture that values initiative and ideas Career progression with being part of a fast growing company, bringing great opportunities. Who We Are SchoolGrid provides trusted software solutions to schools, catering providers, and local authorities across the UK. Our platform supports the full meal service journey, from menu planning to meal ordering, making daily operations more efficient for thousands of users. With deep experience in the school catering space, we pride ourselves on building long term partnerships and delivering technology that works in the real world. Our clients rely on us not just for software, but for consistent, responsive support and a commitment to ongoing improvement. As we continue to grow and expand our offering, we remain focused on delivering the same high standards of service, training, and innovation that our clients expect.