Queen Square Recruitment
Benchtop Support
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
New Exciting opportunity for the role of the Benchtop Support
Location: Oxford, UK (Office Based)
Duration: 6 Months
IR35 Status: Inside IR35
The Role
We are seeking an Associate Systems Engineer to support the security and modernization of laboratory and operational technology (OT) environments across global sites. This individual will work directly within the Lab Solutions team to execute a portfolio of active security workstreams — including Non-Attributable Account (NAA) remediation, software download restrictions, vulnerability remediation, and USB data transfer controls — while supporting the broader goal of bringing lab OT posture in line with enterprise security standards.
This is a highly technical, execution-focused role requiring strong hands-on skills in Active Directory, endpoint security, network architecture, and lab instrument environments. The successful candidate will be comfortable working across both IT and OT boundaries, engaging directly with Business System Owners, lab scientists, vendors, and global site partners to deliver change in a complex, multi-site environment.
Essential skills/experience
Identity & Access Management
- Proficiency in Active Directory administration: OU structure, Group Policy Objects (GPOs), user/service account management, and authentication protocols including RC4/NTLM/Kerberos.
- Understanding of allow/deny list enforcement mechanisms within AD and Lab OU environments.
- Experience with service account lifecycle management and privileged access controls.
- Understanding of enterprise Identity Management tools (Sailpoint)
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Endpoint & OT Security
- Working knowledge of endpoint detection and response (EDR) platforms, particularly CrowdStrike Falcon.
- Understanding of OT/lab network architecture, including isolated or semi-isolated lab network segments, instrument connectivity, and associated security risks.
- Familiarity with USB restriction and software control policies on Windows endpoints.
- Knowledge of vulnerability management concepts: OS patching, EOL systems, open file shares, and network-level exposure.
Lab & Instrument Environment Familiarity
- Understanding of how lab instruments authenticate to networks and the dependencies that exist between shared accounts and instrument operation.
- Familiarity with Transparent Screen Lock (TSL) or similar technologies for instrument session management.
- Awareness of lab data systems such as NuGenesis (SDMS), Empower (Waters), or similar scientific data and chromatography platforms is a plus.
- Awareness of working in Biopharma Laboratory Environments
- Awareness of GxP and Information Security compliance constraints
- Familiarity with ITIL ITSM principles
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Tools & Platforms
- ServiceNow or equivalent ITSM platform for demand intake and ticket management.
- BeyondTrust or equivalent privileged access management and remote support tooling.
- Microsoft Windows Server and Windows 10/11 administration.
- Familiarity with network monitoring and log analysis tools.
- Proficiency in PowerShell preferred.
Desirable skills/experience
- Strong analytical skills and attention to detail — comfortable working with large datasets (login logs, AD exports, host inventories) to draw meaningful conclusions.
- Clear written and verbal communication skills; able to explain technical concepts to non-technical lab staff and Business System Owners.
- Organized and execution-oriented — this role involves managing multiple concurrent workstreams with defined deadlines.
- Comfortable operating in a fast-moving, ambiguous environment where priorities may shift based on security findings.
- Collaborative and service-minded — the lab community depends on this role to keep instruments running securely
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location