Lead IT Operations Systems Engineer

Blue Light Card. Individually great, together unstoppableThe Role and the TeamWhen something breaks across BLC's technology, or a big change needs a steady technical hand, this is the person colleagues turn to. Our IT Operations team keeps the digital workplace running smoothly for everyone who works to make heroes happy, and we're looking for a senior engineer to help take that to the next level.This is a senior individual contributor role and the top-line technical escalation point for our wider IT environment. You'll own the design and continuous improvement of our most complex and business-critical systems, spanning hardware, networks, Microsoft services and SaaS platforms, and you'll be responsible for how well they perform, how secure they are, and how resilient they stay as we grow. There's no line management, but you'll mentor senior and mid-level engineers and set the technical standards the team works to. You'll report to the IT Operations Manager.You'll work closely with senior stakeholders, suppliers and colleagues across the business, and alongside our AI and Automation Engineer where automations touch the shared platform. Expect plenty of hands-on work: scripting, automating and fixing things properly, as well as shaping the direction our technology takes.What You'll DoOwn the security, performance and reliability of our core systems end to end, from infrastructure and endpoint management to business applicationsAct as the top-line technical escalation point, diagnosing complex incidents through logs and system behaviour and running root cause work so recurring issues are fixed for goodShape technical design choices and a technology roadmap that supports company goals, backed by clear business cases for significant changeAdminister and improve Microsoft 365 and Entra ID, and support the adoption, integration and standardisation of SaaS and cloud services across the businessBuild PowerShell scripts and production-grade workflow automations, in tools such as n8n or Power Automate, to take manual effort out of provisioning, patching and reportingDesign and maintain security controls such as Conditional Access, device compliance and Zero Trust access, and guide vulnerability management, audits and resilience testingPartner with stakeholders to scope and deliver IT projects, including migrations, upgrades and integrations, and manage supplier relationships, licensing and costMentor and coach senior and mid-level engineers, and advise senior stakeholders in plain language on risk and optionsWhat You'll BringExtensive background in IT systems engineering, including senior or third-line level, with a strong record of independently owning complex, high-impact technical problems end to endExpert hands-on experience administering Microsoft 365 and Entra ID in a cloud-only environment, including Intune, Conditional Access and Autopilot, plus Apple Automated Device Enrolment and SAML and SCIM provisioning, ideally backed by Microsoft certification such as MS-102 or SC-300Strong experience managing the device lifecycle across Windows and macOS, with in-depth knowledge of networking (DNS, DHCP, VLANs, VPNs, firewalls, Wi-Fi and cloud networking) and Zero Trust accessA strong grounding in security architecture and operations, including identity and access management, least privilege, vulnerability management and incident response, and a certification such as CCNA or Security+ or equivalentAdvanced hands-on PowerShell, including Microsoft Graph and REST APIs, and extensive experience building production automations in n8n or comparable tools, with a sound understanding of OAuth, app registrations and secrets managementHands-on experience deploying and governing enterprise AI tools such as Claude, ChatGPT Enterprise or Microsoft Copilot, including SSO, data protection controls and connecting them safely to business systems via APIs and MCPExperience working within ITIL-aligned service management, explaining risk and options clearly to senior non-technical stakeholders, and mentoring engineers. Experience with ISO 27001 or Cyber Essentials Plus, Jamf or Kandji, or Jira Service Management would be a bonus, but is not essentialOur CultureOur mission is simple: make heroes happy. Our members are real-life heroes who keep us all safe, cared for, and thriving. It's what gets us up in the morning, what makes us want to think bigger, and create something that truly matters. By focusing on their happiness, we create amazing experiences, deliver unrivalled discounts, innovative products, and world-class service.We don't just follow the usual path - we look for smarter, bolder ways to deliver real impact. We take ownership, move fast, and work shoulder to shoulder to build something special.We promote hybrid working, and value in-person collaboration so encourage time in our offices – either the HQ in Leicestershire, or London, Holborn office. The frequency and office location will vary depending on the role and team. We aim to be flexible, but we aren't able to offer fully remote working.Blue Light Card is an equal opportunities employer. We're committed to building a diverse and inclusive team where different perspectives and experiences help us grow, innovate, and better reflect the communities we serve. We make recruiting decisions based on your experience and skills. In the event of a high number of applications, we'll prioritise candidates who meet both the essential and desirable criteria for the role.What We Offer25 days annual leave plus public holidays and an additional day off for your birthdayA Moments that Matter day – one extra day of leave each year to use for something that matters to youBuy and sell holiday scheme of up to 5 daysA volunteering/fundraising day – one paid day each year to give something back to the communityAnnual company bonus scheme – linked to both company and individual performanceYour own Blue Light Card and exclusive access to thousands of discountsPersonal growth fund of £450 per year to invest in your developmentPrivate Medical Insurance that includes cover for pre-existing conditionsAuto-enrolment pension scheme via salary sacrifice, with 100% of employer NI savings reinvested into your pensionEnhanced Maternity, Partner, Adoption and Shared Parental LeaveHealthcare cash-back planColleague Assistance Programme – 24/7 confidential support whenever you need itHybrid working and flexible hoursEV charging and free parking onsite at HQRelaxed dress code and modern office space (games area, chill-out areas, book club, free drinks and well stocked snack drawers!)On-site gym including free HIIT and stretch classes at HQ#LI-Hybrid