VE3
Senior IT Systems Engineer
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Senior IT Systems Engineer
Location
UK
Position Type
Full-time
Experience Level
5+ years
About the role
VE3 is looking for a hands-on Senior IT Systems Engineer to support and administer our Microsoft 365 environment and strengthen security across company devices and accounts.
You will configure laptops, implement and maintain Microsoft Intune, troubleshoot technical issues and take ownership of support tickets through to resolution. Working with colleagues across the UK and India, you will ensure employees have reliable IT services and secure access to company systems.
This is a technical individual contributor role. You will coordinate with other IT team members on tickets and technical work, with no formal people-management responsibility.
Requirements
Key responsibilities
Microsoft 365 and identity
- Configure, administer and troubleshoot Microsoft 365 services, including Exchange Online, Teams, SharePoint Online and OneDrive.
- Administer Microsoft Entra ID, including users, groups, enterprise applications and access permissions.
- Implement and troubleshoot multifactor authentication, Conditional Access and single sign-on.
- Configure role-based access, privileged access controls and separate administrator accounts.
- Complete employee onboarding, role changes and offboarding, including account provisioning, licence allocation and access removal.
- Troubleshoot email delivery, authentication, collaboration and synchronisation issues.
- Review and secure external sharing, guest access and tenant settings.
Intune and device engineering
- Implement, configure and maintain Microsoft Intune for company laptops and mobile devices.
- Configure Windows Autopilot for consistent device provisioning and deployment.
- Build and maintain device configuration profiles, compliance policies and endpoint security policies.
- Package, deploy, update and troubleshoot applications through Intune.
- Configure BitLocker encryption, Windows update policies, endpoint protection and local administrator controls.
- Diagnose device enrolment failures, policy conflicts, application deployment issues and compliance failures.
- Set up and support Windows laptops, with support for macOS, iOS and Android where required.
- Manage device allocation, recovery, remote wipe and secure reassignment, maintaining accurate asset records.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Microsoft security
- Configure and support Microsoft Defender for Endpoint and Defender for Office 365, according to available licensing.
- Investigate endpoint, identity and email security alerts; contain threats and remediate affected accounts or devices.
- Implement protection against phishing, malware, compromised credentials and unauthorised access.
- Configure access restrictions for unmanaged or non-compliant devices.
- Implement controls to restrict the download or sharing of confidential company information.
- Identify security configuration gaps and implement practical improvements.
- Configure and maintain Windows LAPS, endpoint hardening and least-privilege access.
- Maintain technical evidence and documentation to support security reviews and audits.
Hands-on IT support
- Monitor the internal support queue and prioritise incidents and requests according to urgency and business impact.
- Take ownership of tickets from investigation through to resolution, keeping users informed.
- Coordinate with IT colleagues to assign or escalate issues and ensure effective handovers.
- Provide remote troubleshooting for laptops, Microsoft 365, connectivity, applications and peripherals.
- Investigate recurring problems and implement permanent fixes.
- Escalate complex issues to Microsoft or other suppliers and follow them through to resolution.
- Write clear troubleshooting guides, configuration records and support procedures.
Automation and reliability
- Use PowerShell to automate routine administration, reporting and support tasks.
- Test configuration changes before deployment and document rollback steps.
- Monitor device health, patch status and compliance, resolving failures proactively.
- Support recovery testing and maintain reliable administrative access procedures.
- Recommend technical improvements that reduce manual work and improve the employee experience.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Essential skills and experience
- Strong hands-on experience in a systems engineer, Microsoft 365 engineer, endpoint engineer or senior IT support role.
- Practical Microsoft 365 administration across Exchange Online, Teams, SharePoint Online and OneDrive.
- Proven experience configuring and troubleshooting Microsoft Intune, including enrolment, compliance, configuration profiles and application deployment.
- Experience with Windows Autopilot and Windows device provisioning.
- Strong knowledge of Microsoft Entra ID, MFA, Conditional Access and access permissions.
- Practical experience with Microsoft Defender and endpoint security controls.
- Strong Windows troubleshooting skills, including investigating logs, policy application and device performance.
- Working knowledge of DNS, DHCP, networking and secure remote access.
- Ability to write and troubleshoot PowerShell scripts.
- Experience working with ticketing systems and supporting remote employees.
- Ability to independently investigate technical problems and take them through to resolution.
- Clear communication and thorough technical documentation.
Desirable skills and experience
- Experience administering macOS, iOS and Android devices through Intune.
- Familiarity with Microsoft Purview, sensitivity labels and data loss prevention.
- Experience with privileged identity management and access reviews.
- Familiarity with Cloudflare or similar secure access technologies.
- Experience supporting Cyber Essentials or ISO 27001 controls.
- Relevant Microsoft certifications in endpoint administration, Microsoft 365, identity or security.
What we are looking for
A technically strong engineer who enjoys configuring systems, troubleshooting difficult issues and improving security. You should be comfortable working directly in administration portals, endpoint tooling and PowerShell, while providing responsive and approachable support to employees.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Location