Senior IT Engineer

The team:

Risk Ledger sells trust. Our product tells customers whether their suppliers are secure, so our own security posture is part of what we sell. We’re ISO 27001 certified, SOC 2 compliant and working towards ISO 42001, and the way we run IT is evidence in those audits.

As our Senior IT Engineer, you’ll be the single owner of IT: our people, devices and SaaS estate. You’ll work directly with the Director of Information Security & IT Operations, alongside our Senior SecOps Engineer, supporting every team across our UK and US offices. The team is growing from 3 to 5-6 people over the next 12 months, so you’ll help shape how IT and security work together as we scale.

This is an engineering role, not a help desk role. You’ll still run support well, but your impact will come from building the platform: identity, device management, automation and safe AI enablement.

In the role you will;

Own identity, access and SaaS administration

• Administer our cloud identity provider and productivity suite, including users, groups, app access, third-party app controls and mail routing.
• Implement and maintain SSO and automated user provisioning (SCIM) across our SaaS estate, and help us move to a dedicated identity platform.
• Administer our core business tools, from collaboration and documentation to ticketing, password management and AI tools, keeping access least-privilege and role-based.
• Run access changes and privileged-account requests, and support the quarterly access reviews our policies require.

Engineer endpoint and device management

• Own our MDM platform for a macOS fleet: zero-touch enrolment, configuration profiles, patching, compliance, self-service, and remote lock and wipe.
• Build and enforce endpoint controls, including controls on local AI tooling, browser and extension policy, and just-in-time admin elevation.
• Manage enrolment of personal devices that access company data.
• Prepare for and support the rollout of endpoint detection and response (EDR) with Security Operations.

Run joiners, movers and leavers end to end

• Own the process from HR trigger to day one and final day, covering hardware, accounts, access changes and offboarding, with no gaps between HR and IT.
• Automate wherever you can, and track time-to-onboard and time-to-offboard against an agreed SLA.
• Support colleagues in the UK and US, including those employed through third-party arrangements.

Operate IT as a service

• Own the IT support queue and channels: triage, resolve, and set clear expectations on response times.
• Maintain self-help guides and runbooks so common requests become self-service.
• Look after hardware, AV, meeting rooms and office technology, including office moves.
• Spot recurring issues and fix the cause, not the ticket.

Be a security-minded partner to the Director of Information Security

• Be the Director’s hands-on IT counterpart, implementing security controls, policies and improvements across our IT estate and keeping them running.
• Bring a security lens to every IT decision, flagging risks early and proposing secure alternatives rather than workarounds.
• Configure and tune browser and SaaS security tooling, and act on its alerts, such as leaked credentials and unsanctioned apps.
• Run first-line triage on reported phishing and IT-side incident response, including preserving evidence from devices.
• Review new tools, integrations and browser extensions against our supplier and AI governance processes before they’re allowed.
• Own the IT asset register and keep IT and device controls passing in our compliance platform, with evidence ready for SOC 2, ISO 27001 and Cyber Essentials Plus audits.
• Support security projects, policy updates, audits and reporting.

Automate, enable AI and scale

• Make automation the default. Script, integrate and orchestrate repetitive IT and admin work using scripting, APIs, workflow tools and AI agents, and document what you build.
• Build AI-assisted IT operations, such as agents that triage requests, answer common questions from our runbooks, or check tool requests against our approval criteria.
• Roll out, configure and administer approved AI tools, connectors and integrations so every team can use them productively and safely.
• Put practical guardrails in place in line with our AI policies, covering access scopes, data boundaries, connector and MCP controls, and visibility of what’s in use.
• Help colleagues adopt AI well through guides, office hours and quick wins, and feed what you learn into our AI governance.
• Evaluate and introduce IT and AI tooling with clear cost and risk trade-offs, help shape the IT roadmap with the Director, and mentor any future IT Ops Engineer.

You’ll have;

• 4+ years in IT operations or systems administration, including at least 2 in an engineering-led role at a SaaS or similar fast-growing company.
• Deep, hands-on administration of a cloud identity provider and productivity suite, including identity, groups, app access and security settings.
• Strong experience managing a macOS fleet with an MDM platform: profiles, policies, scripting and zero-touch enrolment.
• Experience implementing SSO (SAML/OIDC) and SCIM provisioning across a SaaS estate.
• A track record of automating JML and admin work rather than doing it by hand.
• Hands-on experience rolling out and administering AI tools in a business, and using AI or workflow automation to make IT operations faster.
• Scripting ability in at least one language (such as Bash, Python or JavaScript) and comfort working with REST APIs.
• A strong security mindset: least privilege, phishing and credential risk, browser and extension risk, and how IT controls map to audit evidence.

The perks:

• 💰Competitive base salary
• 📈Generous EMI equity package
• 👌Private pension
• ✈️28 days annual leave + bank holidays
• 🏖Additional 30 days of unpaid leave per year to use as you wish
• 🎆Ad-hoc companywide time off over the festive period
• 🏥Private healthcare with AXA Insurance - including enhanced mental wellbeing coverage
• 🏠Hybrid working policy, typically 2-3 days in the office
• 👶Enhanced family (parental) leave - gender-neutral policy, 12 weeks paid leave
• 👪5 days Caretaker’s leave
• 😷Enhanced occupational sick pay
• 💻£500 WFH budget
• 📚All the learning resources and books you want to aid in your personal development
• 🎉 Regular socials to unwind and have some fun