Lead IT Operations Systems Engineer

Blue Light Card. Individually great, together unstoppable

The Role and the Team

When something breaks across BLC's technology, or a big change needs a steady technical hand, this is the person colleagues turn to. Our IT Operations team keeps the digital workplace running smoothly for everyone who works to make heroes happy, and we're looking for a senior engineer to help take that to the next level.

This is a senior individual contributor role and the top-line technical escalation point for our wider IT environment. You'll own the design and continuous improvement of our most complex and business-critical systems, spanning hardware, networks, Microsoft services and SaaS platforms, and you'll be responsible for how well they perform, how secure they are, and how resilient they stay as we grow. There's no line management, but you'll mentor senior and mid-level engineers and set the technical standards the team works to. You'll report to the IT Operations Manager.

You'll work closely with senior stakeholders, suppliers and colleagues across the business, and alongside our AI and Automation Engineer where automations touch the shared platform. Expect plenty of hands-on work: scripting, automating and fixing things properly, as well as shaping the direction our technology takes.

What You'll Do

• Own the security, performance and reliability of our core systems end to end, from infrastructure and endpoint management to business applications
• Act as the top-line technical escalation point, diagnosing complex incidents through logs and system behaviour and running root cause work so recurring issues are fixed for good
• Shape technical design choices and a technology roadmap that supports company goals, backed by clear business cases for significant change
• Administer and improve Microsoft 365 and Entra ID, and support the adoption, integration and standardisation of SaaS and cloud services across the business
• Build PowerShell scripts and production-grade workflow automations, in tools such as n8n or Power Automate, to take manual effort out of provisioning, patching and reporting
• Design and maintain security controls such as Conditional Access, device compliance and Zero Trust access, and guide vulnerability management, audits and resilience testing
• Partner with stakeholders to scope and deliver IT projects, including migrations, upgrades and integrations, and manage supplier relationships, licensing and cost
• Mentor and coach senior and mid-level engineers, and advise senior stakeholders in plain language on risk and options

What You'll Bring

• Extensive background in IT systems engineering, including senior or third-line level, with a strong record of independently owning complex, high-impact technical problems end to end
• Expert hands-on experience administering Microsoft 365 and Entra ID in a cloud-only environment, including Intune, Conditional Access and Autopilot, plus Apple Automated Device Enrolment and SAML and SCIM provisioning, ideally backed by Microsoft certification such as MS-102 or SC-300
• Strong experience managing the device lifecycle across Windows and macOS, with in-depth knowledge of networking (DNS, DHCP, VLANs, VPNs, firewalls, Wi-Fi and cloud networking) and Zero Trust access
• A strong grounding in security architecture and operations, including identity and access management, least privilege, vulnerability management and incident response, and a certification such as CCNA or Security+ or equivalent
• Advanced hands-on PowerShell, including Microsoft Graph and REST APIs, and extensive experience building production automations in n8n or comparable tools, with a sound understanding of OAuth, app registrations and secrets management
• Hands-on experience deploying and governing enterprise AI tools such as Claude, ChatGPT Enterprise or Microsoft Copilot, including SSO, data protection controls and connecting them safely to business systems via APIs and MCP
• Experience working within ITIL-aligned service management, explaining risk and options clearly to senior non-technical stakeholders, and mentoring engineers. Experience with ISO 27001 or Cyber Essentials Plus, Jamf or Kandji, or Jira Service Management would be a bonus, but is not essential

Our Culture

Our mission is simple: make heroes happy. Our members are real-life heroes who keep us all safe, cared for, and thriving. It's what gets us up in the morning, what makes us want to think bigger, and create something that truly matters. By focusing on their happiness, we create amazing experiences, deliver unrivalled discounts, innovative products, and world-class service.

We don't just follow the usual path - we look for smarter, bolder ways to deliver real impact. We take ownership, move fast, and work shoulder to shoulder to build something special.

We promote hybrid working, and value in-person collaboration so encourage time in our offices – either the HQ in Leicestershire, or London, Holborn office. The frequency and office location will vary depending on the role and team. We aim to be flexible, but we aren't able to offer fully remote working.

Blue Light Card is an equal opportunities employer. We're committed to building a diverse and inclusive team where different perspectives and experiences help us grow, innovate, and better reflect the communities we serve. We make recruiting decisions based on your experience and skills. In the event of a high number of applications, we'll prioritise candidates who meet both the essential and desirable criteria for the role.

What We Offer

• 25 days annual leave plus public holidays and an additional day off for your birthday
• A Moments that Matter day – one extra day of leave each year to use for something that matters to you
• Buy and sell holiday scheme of up to 5 days
• A volunteering/fundraising day – one paid day each year to give something back to the community
• Annual company bonus scheme – linked to both company and individual performance
• Your own Blue Light Card and exclusive access to thousands of discounts
• Personal growth fund of £450 per year to invest in your development
• Private Medical Insurance that includes cover for pre-existing conditions
• Auto-enrolment pension scheme via salary sacrifice, with 100% of employer NI savings reinvested into your pension
• Enhanced Maternity, Partner, Adoption and Shared Parental Leave
• Healthcare cash-back plan
• Colleague Assistance Programme – 24/7 confidential support whenever you need it
• Hybrid working and flexible hours
• EV charging and free parking onsite at HQ
• Relaxed dress code and modern office space (games area, chill-out areas, book club, free drinks and well stocked snack drawers!)
• On-site gym including free HIIT and stretch classes at HQ

#LI-Hybrid