Senior IT Engineer

Risk Ledger; Greater London; Hybrid; GBP 70,000 - 100,000; Full time

Benefits offered by this job

Generous EMI equity package

28 days annual leave + bank holidays

Additional 30 days of unpaid leave per

Ad-hoc companywide time off over the</

Private healthcare with AXA Insurance

Hybrid working policy, typically 2-3</

Enhanced family (parental) leave - GND

Enhanced occupational sick pay

All the learning resources and books

Regular socials to unwind

Job summary

Risk Ledger is hiring a Senior IT Engineer to own IT: identity, devices and SaaS estate across UK and US offices. You’ll work with the Director of Information Security & IT Operations to provide strong security controls, automation and scalable IT services.

This engineering role focuses on building the platform, not just helpdesk, with zero-touch enrolment, AI tooling, and compliant practices as the company scales.

Qualifications

• 4+ years in IT operations or systems administration, including at least 2 in an engineering-led role at a SaaS or similar fast-growing company.
• Deep, hands-on administration of a cloud identity provider and productivity suite, including identity, groups, app access and security settings.
• Strong experience managing a macOS fleet with an MDM platform: profiles, policies, scripting and zero-touch enrolment.
• Experience implementing SSO (SAML/OIDC) and SCIM provisioning across a SaaS estate.
• A track record of automating JML and admin work rather than doing it by hand.
• Hands-on experience rolling out and administering AI tools in a business, and using AI or workflow automation to make IT operations faster.

Responsibilities

• Own identity, access and SaaS administration across the organisation.
• Engineer endpoint and device management for a macOS fleet with MDM, zero-touch enrolment and EDR readiness.
• Run joiners, movers and leavers end to end, covering hardware, accounts and access changes with SLA adherence.
• Operate IT as a service, maintaining guides, runbooks and self-service capabilities.
• Be a security-minded partner to the Director of Information Security and IT Operations, implementing controls and evidence for audits.
• Automate, enable AI and scale by scripting, integrating and AI tooling, while shaping the IT roadmap.

Skills

IT operations

Systems administration

Cloud identity management

SSO provisioning

SCIM provisioning

MDM platform administration

Automation scripting

AI tooling deployment

Security mindset

Tools

MDM platform

SSO (SAML/OIDC)

CLI / PowerShell

Job description

Risk Ledger is developing a network of connected organisations, all working together to defend against cybersecurity attacks in the supply chain.

Organisations rely on us to establish trust, through sharing their security maturity and visualising the risks posed by their supply chain ecosystem. And we’re already trusted by customers like British Airways, BAE Systems and the NHS.

We are putting together an amazing and talented team from a diverse set of backgrounds and skillsets to drive us towards our vision. Risk Ledger is built on the respect we have for one another and our users, united by our shared values and mission.

Every one of us is still learning: it’s how we grow as individuals. We’re curious. We’re ambitious. And we’re humble and honest. At Risk Ledger, we aim high to find the best solutions we can and always put our users first.

The team:

Risk Ledger sells trust. Our product tells customers whether their suppliers are secure, so our own security posture is part of what we sell. We’re ISO 27001 certified, SOC 2 compliant and working towards ISO 42001, and the way we run IT is evidence in those audits.

As our Senior IT Engineer, you’ll be the single owner of IT: our people, devices and SaaS estate. You’ll work directly with the Director of Information Security & IT Operations, alongside our Senior SecOps Engineer, supporting every team across our UK and US offices. The team is growing from 3 to 5-6 people over the next 12 months, so you’ll help shape how IT and security work together as we scale.

This is an engineering role, not a help desk role. You’ll still run support well, but your impact will come from building the platform: identity, device management, automation and safe AI enablement.

In the role you will;

Own identity, access and SaaS administration

• Administer our cloud identity provider and productivity suite, including users, groups, app access, third-party app controls and mail routing.
• Implement and maintain SSO and automated user provisioning (SCIM) across our SaaS estate, and help us move to a dedicated identity platform.
• Administer our core business tools, from collaboration and documentation to ticketing, password management and AI tools, keeping access least-privilege and role-based.
• Run access changes and privileged-account requests, and support the quarterly access reviews our policies require.

Engineer endpoint and device management

• Own our MDM platform for a macOS fleet: zero-touch enrolment, configuration profiles, patching, compliance, self-service, and remote lock and wipe.
• Manage enrolment of personal devices that access company data.
• Prepare for and support the rollout of endpoint detection and response (EDR) with Security Operations.

Run joiners, movers and leavers end to end

• Own the process from HR trigger to day one and final day, covering hardware, accounts, access changes and offboarding, with no gaps between HR and IT.
• Automate wherever you can, and track time-to-onboard and time-to-offboard against an agreed SLA.
• Support colleagues in the UK and US, including those employed through third-party arrangements.

Operate IT as a service

• Own the IT support queue and channels: triage, resolve, and set clear expectations on response times.
• Maintain self-help guides and runbooks so common requests become self-service.
• Look after hardware, AV, meeting rooms and office technology, including office moves.
• Spot recurring issues and fix the cause, not the ticket.

Be a security-minded partner to the Director of Information Security

• Be the Director’s hands-on IT counterpart, implementing security controls, policies and improvements across our IT estate and keeping them running.
• Bring a security lens to every IT decision, flagging risks early and proposing secure alternatives rather than workarounds.
• Run first-line triage on reported phishing and IT-side incident response, including preserving evidence from devices.
• Own the IT asset register and keep IT and device controls passing in our compliance platform, with evidence ready for SOC 2, ISO 27001 and Cyber Essentials Plus audits.
• Support security projects, policy updates, audits and reporting.

Automate, enable AI and scale

• Make automation the default. Script, integrate and orchestrate repetitive IT and admin work using scripting, APIs, workflow tools and AI agents, and document what you build.
• Build AI-assisted IT operations, such as agents that triage requests, answer common questions from our runbooks, or check tool requests against our approval criteria.
• Roll out, configure and administer approved AI tools, connectors and integrations so every team can use them productively and safely.
• Put practical guardrails in place in line with our AI policies, covering access scopes, data boundaries, connector and MCP controls, and visibility of what’s in use.
• Help colleagues adopt AI well through guides, office hours and quick wins, and feed what you learn into our AI governance.
• Evaluate and introduce IT and AI tooling with clear cost and risk trade-offs, help shape the IT roadmap with the Director, and mentor any future IT Ops Engineer.

You’ll have;

• 4+ years in IT operations or systems administration, including at least 2 in an engineering-led role at a SaaS or similar fast-growing company.
• Deep, hands-on administration of a cloud identity provider and productivity suite, including identity, groups, app access and security settings.
• Strong experience managing a macOS fleet with an MDM platform: profiles, policies, scripting and zero-touch enrolment.
• Experience implementing SSO (SAML/OIDC) and SCIM provisioning across a SaaS estate.
• A track record of automating JML and admin work rather than doing it by hand.
• Hands-on experience rolling out and administering AI tools in a business, and using AI or workflow automation to make IT operations faster.

The perks:

• Generous EMI equity package
• 28 days annual leave + bank holidays
• Additional 30 days of unpaid leave per year to use as you wish
• Ad-hoc companywide time off over the festive period
• Private healthcare with AXA Insurance - including enhanced mental wellbeing coverage
• Hybrid working policy, typically 2-3 days in the office
• Enhanced family (parental) leave - gender-neutral policy, 12 weeks paid leave
• Enhanced occupational sick pay
• All the learning resources and books you want to aid in your personal development
• Regular socials to unwind and have some fun

Salary range