Automation Engineer - Remote

Owlis; Knightsbridge; Remote; GBP 50,000 - 75,000; Full time

Job summary

Owlis is seeking a remote UK-based Automation Engineer to build and standardize Datto RMM policies, monitors and scripts across group companies. You will design scalable automation, maintain monitors and patching, and migrate legacy scripts into a unified platform.

The role focuses on onboarding, security baselines, and remediation using PowerShell, Git, HaloPSA, and Microsoft 365 tooling. Occasional travel one to three days per month may be required.

Qualifications

• Automation experience with RMM platforms.
• Scripting in PowerShell with logging.
• Experience migrating policies across estates.
• Documentation of scripts and policies.

Responsibilities

• Design and maintain Datto RMM site, policy and device group structure across the group.
• Build and maintain monitors, patch policies and scheduled jobs.
• Migrate existing scripts and policies to the group standard.
• Keep naming, documentation and component standards up to date.
• Write, test and maintain PowerShell components for onboarding, offboarding, security baselines and remediation.
• Automate Microsoft 365, Intune and Entra ID tasks where safe.
• Hold scripts in version control with peer review.

Skills

RMM automation

PowerShell scripting

Monitoring policies

Documentation

Automation design

Tools

Datto RMM

HaloPSA

Git

Job description

Location: Remote within the UK, with occasional travel to our group companies, typically one to three days a month

Hours: Monday to Friday, 09:00 to 18:00 (40 hours a week)

Abut us

Owlis is a UK IT managed services group, backed by private equity, that grows by bringing established regional IT providers together on one platform. Each business keeps its own name and its local relationships. Behind it sits one set of systems, one set of policies, and a group with the depth to support it properly. Together, we look after small and medium-sized businesses across the UK with managed IT, cybersecurity, and AI and transformation services.

About the role

Our group companies are moving onto one set of Kaseya tools, including Datto RMM (remote monitoring and management). Each company brings its own scripts, habits and gaps. This role builds the automation that runs our managed service: standard policies, monitoring, patching and scripted fixes, applied the same way across every company, so engineers spend less time on repeat work and clients get fewer problems.

Core systems

• Datto RMM (Kaseya): components, policies, monitors, jobs
• PowerShell, with Git for version control
• HaloPSA for tickets, change records and alert integration
• Microsoft 365 admin centres, Intune and Entra ID

What you will be doing

RMM build and standards

• Design and maintain Datto RMM site, policy and device group structure across the group
• Build and maintain monitors, patch policies and scheduled jobs
• Review each group company's existing scripts and policies, and migrate them to the group standard
• Keep naming, documentation and component standards up to date

Automation and scripting

• Write, test and maintain PowerShell components for onboarding, offboarding, security baselines and remediation
• Automate Microsoft 365, Intune and Entra ID tasks where safe
• Hold scripts in version control with peer review

Integration and alerting

• Tune alert thresholds to cut noise without missing real problems
• Configure alert-to-ticket rules between Datto RMM and HaloPSA with the service desk teams
• Report on automation coverage and repeat ticket trends

Safe change

• Raise change records for every policy or component change that affects client devices
• Use pilot groups and staged rollouts, with rollback plans
• Carry out planned out-of-hours changes when needed, agreed in advance
• Escalate suspected security issues to the incident response owner immediately

Outcomes and KPIs

• In the first 90 days: our Datto RMM policies, monitors and core components reviewed and documented; first standard automations (onboarding, patching, common fixes) live in at least one group company.
• By 6 months: standard policies and automation rolled out across the group companies on Datto RMM, with change control; alerts tuned so engineers trust them.
• By 12 months: measurable drop in repeat tickets for automated issues; RMM alerts raising tickets in HaloPSA cleanly; a maintained library of tested scripts and components.
• Clear evidence of building and maintaining RMM automation at scale, with testing and rollout described
• Writes idempotent scripts with error handling, logging, least privilege and no stored credentials; uses version control; and starts with high-volume, low-risk tasks
• Uses site and device grouping, inheritance and exceptions, separates servers from workstations, tunes alerts to cut noise and documents the standard
• Keeps change records, documented components, naming standards and alert-to-ticket rules agreed with the service desk, and sees documentation as part of the job
• Designs automation with clear logic, safe defaults (report before remove), error handling, logging and output an engineer can act on, and knows how to package it in the RMM
• Rolls out safely across client estates with a pilot group, staged rollout, change record, client communication and rollback ready, and when something goes wrong stops, rolls back, investigates and tells the service desk
• Owns mistakes and fixes them, and raises a better way constructively and tests it

Essential skills and experience

• Has built and maintained automation in an RMM (remote monitoring and management) tool, such as Datto RMM, for many devices
• Writes reliable PowerShell scripts with error handling and logging for Windows endpoints and Microsoft 365
• Has set up monitoring, patching and alerting policies for endpoints and servers
• Tests and rolls out changes safely across live estates: pilot groups, change records and rollback
• Documents scripts and policies so other engineers can use and support them

Desirable skills and experience

• Hands-on experience with Datto RMM components, policies and monitors
• Experience in an IT managed services provider supporting several client businesses
• Has integrated an RMM with a PSA tool such as HaloPSA, including alert-to-ticket rules
• Microsoft Graph, Intune or Entra ID automation
• Uses Git or another version control tool for scripts
• Microsoft certification such as MD-102 or AZ-104

Development

We expect the role to grow into a senior automation or platform engineering role as the group grows. Microsoft and Kaseya training is supported where it fits the work.

Our recruitment process

Our process usually has four stages:

• A short pre-screening call with our HR / Recruitment team.
• A competency interview with the Head of AI / Operations Director
• A live automation design exercise with a scenario and a technical assessment
• A short final call with an Owlis Group executive, after which we aim to make an offer.

Any offer is conditional on two satisfactory professional references from employers named on your CV (with a work email address for each), proof of your right to work in the UK and a basic DBS check, because the role has privileged access to client systems. We are unable to offer visa sponsorship.

Please note that this is a job advertisement rather than a full job description. The complete job description will be shared with you alongside your contract of employment.

Equal opportunities

The Owlis Group is an equal opportunities employer. We welcome applications from everyone and make recruitment decisions on the basis of skills, experience and potential, regardless of age, disability, gender reassignment, marriage or civil partnership, pregnancy or maternity, race, religion or belief, sex or sexual orientation. If you need any adjustments to take part fully in the recruitment process, please let us know and we will be glad to help.