Senior 2nd Line Engineer - MSP

Hyra; Leighton Buzzard; On-site; GBP 36,000 - 40,000; Full time

Benefits offered by this job

38 days holiday and bank holidays

Pension

Training and certification

Job summary

ITCS Global in Leighton Buzzard is seeking a Senior 2nd Line Engineer to run the service desk, resolve tickets and deliver high-quality IT support for a portfolio of SMB clients. The role involves travel to client sites across the UK and direct collaboration with the managing director.

The successful candidate will bring 6+ years in IT, extensive MSP experience, and strong 365/EntraID/Intune skills. The position is full-time on-site with a clear path to senior leadership and professional

Qualifications

• At least 6 years in IT support, with 3+ years at 2nd line, ideally in an MSP.
• Full UK driving licence and willingness to travel to client sites, including London.
• Experience using PSA/ticketing systems and SLAs; able to write clear ticket notes.

Responsibilities

• Run the service desk, manage tickets end-to-end within SLA, keep clients updated and escalate where needed.
• Be the main technical contact for several clients, visit sites and develop client relationships.
• Proactively identify IT needs and ensure high-quality service delivery across UK client base.

Skills

Microsoft 365

Entra ID

Intune

Active Directory

Networking

Security

Backup & patching

RMM tooling

Tools

HaloPSA

ConnectWise

Autotask

Job description

Senior 2nd Line Engineer - MSP

ITCS Global, Leighton Buzzard, Bedfordshire

£36,000 - £40,000 depending on experience.

Full time, permanent - 8:00am - 5:00pm.

ITCS Global is an established managed service provider, supporting small and medium businesses across Bedfordshire, Buckinghamshire, Hertfordshire and London since 2005, with a new office opening in Canada. We are a small team, and this role is the senior engineer in the UK, working day to day with our MD and owning the service our clients receive.

The role

You will run the service desk - picking up tickets, working them through to resolution within SLA, keeping clients updated, and making the call on what needs escalating and what you can sort yourself (which should be most of it). You will be the main technical contact for a number of our clients, visiting their sites, building the relationship and spotting what their IT needs before they ask.

Experience

• At least 6 years in IT support, with 3 or more at 2nd line level, ideally within an MSP.
• Day to day use of a PSA / ticketing system (HaloPSA, ConnectWise, Autotask or similar), working to SLAs and writing ticket notes anyone else can pick up.
• A full UK driving licence and your own reliable car, insured for business use - you will be travelling to client sites, including London.

Skills we expect

Microsoft 365 and Entra ID

• User lifecycle - new starters and leavers, licensing, shared mailboxes, mailbox conversion and forwarding
• Exchange Online - permissions, mail flow rules, message trace, quarantine, retention and archiving
• SharePoint, OneDrive and Teams - permissions, sync issues, site structure and external sharing
• Entra ID - groups, admin roles, guest access, MFA and SSPR, reading sign-in logs and diagnosing Conditional Access blocks
• SPF, DKIM and DMARC - checking and correcting records

Endpoints and device management

• Windows 10/11 troubleshooting beyond the basics - event logs, SFC/DISM, drivers, boot and profile faults
• Intune - enrolment, Autopilot, compliance and configuration profiles, app deployment, BitLocker recovery
• iOS and Android enrolment, app protection policies and device wipes; macOS support is a bonus
• Printers, scanners and MFDs, including scan to email

Windows Server and Active Directory

• Users, groups and OUs, Group Policy creation and troubleshooting
• DNS and DHCP management
• File shares and NTFS permissions
• Server health checks and Hyper‑V / VMware virtual machine management

Networking

• Diagnosing faults across device, switch, firewall and ISP
• Firewall rules, port forwarding and client VPN users
• VLANs, PoE and port configuration on managed switches
• Wi‑Fi access points and controllers
• Managing ISP faults through to resolution

Security

• Phishing triage, tenant‑wide search and purge
• Compromised account response - inbox rules, OAuth apps, sign‑in review, containment and documentation
• Investigating and remediating Defender / EDR alerts
• Implementing Cyber Essentials controls and gathering evidence

Backup, RMM and patching

• Fixing backup failures and managing retention
• File, mailbox, folder and VM restores, including test restores
• RMM monitoring, alert thresholds, scripted fixes and agent deployment
• Patch policy management per client

Useful but not essential

• PowerShell for Exchange Online, Graph and routine admin tasks
• Teams Phone - number assignment, call queues and auto attendants
• Azure basics - VMs and storage
• Certifications such as MD-102, MS-102, AZ-900 / AZ-104 or CompTIA Network+

The person

We want someone who works things out. When something breaks you investigate, try the sensible options and come to us with what you found, not the first error message. You are comfortable managing your own day and your own queue, you stay calm when a client has a problem that is costing them money, and you can explain what has happened in plain English to a director as well as an end user.

You will also keep client documentation and knowledge base articles up to date, and spot work that falls outside a client's contract so it can be quoted.

What you get

• £36,000 - £40,000 depending on experience, with a defined route to a 3rd line / lead engineer role and pay review against it
• 38 days holiday plus bank holidays, pension
• Training and certification paid for where it fits the role