IT Systems Engineer

Zencargo; City Of London; On-site; GBP 60,000 - 80,000; Full time

Job summary

A tech-focused logistics company in London seeks an IT Systems Engineer to build and manage internal IT infrastructure. This hands-on role includes designing MDM and VPN platforms, managing device fleets, and improving security posture. Ideal candidates will have 3+ years of IT operations experience and strong skills in endpoint security. This position offers an opportunity to impact IT strategy while executing technical solutions in a fast-paced environment.

Qualifications

• 3+ years of experience in IT operations, systems administration, or similar.
• Experience deploying and managing MDM solutions.
• Strong understanding of endpoint security and device compliance.

Responsibilities

• Select and implement a new MDM platform to manage devices.
• Evaluate and provision a new VPN provider for secure remote access.
• Own device lifecycle management from procurement to offboarding.

Skills

IT operations

MDM solutions

Endpoint security

VPN solutions

SaaS environments

Coding languages

Problem-solving

Communication skills

Tools

Jamf

Kandji

Google Workspace

Slack

n8n

Zapier

Job description

IT Systems Engineer

Department: Software Engineering

Employment Type: Full Time

Location: London

Description

We’re seeking a skilled IT Systems Engineer to build and own the foundations of our internal IT and device management. In this role, you’ll design and deploy our MDM and VPN platforms, manage our expanding device fleet, and enhance our security posture—from day-to-day operations to company-wide cybersecurity awareness.

This is a hands-on, high-autonomy role where you’ll define how we manage hardware, security, and access across the organization. You’ll serve as the go-to expert for complex IT challenges and play a key role in driving our security maturity as we grow.

If you thrive on shaping IT strategy while staying deeply involved in the technical execution, this is the opportunity to make a meaningful impact from day one.

Key Responsibilities

• Select and implement a new MDM platform (e.g. Jamf, Kandji, Intune, or similar) to manage ~150 macOS and Windows laptops.
• Evaluate and provision a new VPN provider to enable secure remote access for all employees.
• Own device lifecycle management; procurement, setup, tracking, repairs, and offboarding.
• Maintain an accurate asset inventory and documentation for all hardware, software, and access systems.
• Administer and secure core SaaS systems such as Google Workspace, Slack, and internal tools.
• Implement and maintain endpoint security standards; disk encryption, antivirus, patching, and compliance baselines.
• Lead cybersecurity and phishing awareness training, coordinating internal sessions or external providers.
• Act as the escalation point for device and connectivity issues, formalising a helpdesk process to track and monitor requests.
• Provide both remote and on-site support as needed to ensure employees can work productively and securely.
• Automate repetitive IT processes and build lightweight self-service workflows for employees.
• Partner with engineering and security teams to align device and network controls with company security policies.
• Create and maintain clear IT documentation, runbooks, and lightweight policies that support compliance and operational readiness (e.g. SOC 2, ISO 27001).
• Security engineering in GCP — contributing to identity, access, and infrastructure security.
• Vulnerability scanning and management within our CI/CD pipelines and internal systems.
• Supporting wider company security initiatives, including risk assessments and technical controls.

Skills, Knowledge and Expertise

• 3+ years of experience in IT operations, systems administration, or similar.
• Experience deploying and managing MDM solutions (Jamf, Kandji or equivalent).
• Strong understanding of endpoint security and device compliance.
• Experience evaluating and implementing VPN or remote access solutions.
• Familiarity with cybersecurity awareness practices and training delivery.
• Proficiency with macOS and Windows device administration.
• Familiarity with identity and access management within SaaS environments (e.g. Google Workspace).
• Experience supporting SOC 2 or ISO 27001 readiness.
• Familiarity with SaaS management platforms (e.g. BetterCloud, Torii, Fleet).
• Exposure to network configuration and office connectivity setup.
• Experience in a scaling tech company.
• Ability to script or automate processes using a combination of coding languages and workflow automation tools such as n8n or Zapier.
• Excellent communication and problem-solving skills, with the ability to support employees directly and effectively.
• Comfortable building processes from scratch and iterating in a fast-paced scale up.