Senior IT Systems Engineer
Blue Light Card
Stand out for this role — generate a tailored resume and cover letter in about a minute.
Benefits offered by this job
Job summary
Blue Light Card is seeking a Senior IT Systems Engineer to own core systems across infrastructure, endpoint management and business applications. You will administer Microsoft 365, Entra ID, and drive automation with PowerShell and modern tools.
You'll lead complex technical problems, mentor mid-level engineers, and shape how the IT Ops team delivers projects, migrations, and integrations in a hybrid work environment.
Qualifications
- Hands-on IT systems engineering experience.
- Strong background in Microsoft 365 and Entra ID administration.
- Proven scripting and automation skills in PowerShell and/or Python.
Responsibilities
- Own and maintain core systems across infrastructure, endpoint management and business applications.
- Administer and optimise Microsoft 365 services (Exchange Online, Teams, SharePoint, Entra ID).
- Build PowerShell scripts and automations to reduce repetitive IT tasks.
- Provide technical leadership on escalated issues to resolution.
- Design and implement security policies and perform audits and assessments.
- Drive adoption and standardisation of SaaS platforms and cloud services.
- Mentor mid-level engineers and support IT projects across the business.
- Collaborate with stakeholders to plan system migrations, upgrades and integrations.
Skills
Tools
Job description
IT Operations at Blue Light Card is a team that holds a lot of trust across the business. Colleagues across every function rely on the systems and infrastructure this team manages day to day, and as BLC continues to grow at pace, the demands on IT Ops are growing with it. This is a team that takes real ownership of what it looks after, and it's looking for someone who feels the same way.
The Senior IT Systems Engineer sits at the heart of that operation, covering everything from Microsoft 365 and Entra ID administration to complex networking, endpoint management, and security. Around half the time is spent on BAU work including patching, maintenance, and escalated support from mid-level engineers. The other half goes into project work: new systems, integrations, and increasingly, automations that take repetitive effort out of IT operations for good.
This is a hands-on, technically deep role that comes with real scope to shape how the team works. The IT Ops team is actively leading the way on AI and automation across BLC, and whoever takes this role will be right in the middle of that. If you thrive on complex technical problems, care about doing things properly, and want to be part of a team that's building something genuinely modern, this is a good place to be.
- Own and maintain core systems across infrastructure, endpoint management, and business applications, taking full responsibility for their performance, security, and reliability
- Administer and optimise Microsoft 365 services including Exchange Online, Teams, SharePoint, and Entra ID, covering user provisioning, licence management, and governance
- Build and maintain PowerShell scripts and workflow automations using tools such as N8N or Power Automate, removing manual effort from provisioning, patching, reporting, and other repeatable IT tasks
- Provide technical leadership on escalated issues, taking full ownership of complex problems through to resolution rather than deferring to third parties
- Design and implement security policies and procedures, coordinating audits and assessments to keep BLC's environment aligned with organisational and industry standards
- Drive the adoption, integration, and standardisation of SaaS platforms and cloud services across the business, improving the colleague experience and operational consistency
- Support and mentor mid-level engineers, contributing to their technical development and helping the team raise its collective capability
- Collaborate with stakeholders across the business to plan and deliver IT projects, including system migrations, upgrades, and integrations
- Solid, hands‑on experience in IT systems engineering, with a background that spans Microsoft 365 and Entra ID administration, complex networking (DNS, DHCP, VLANs, VPNs, Cloudflare Zero Trust), and endpoint management including Windows Autopilot and Apple ADE
- Proven scripting and automation skills in PowerShell and/or Python, with experience building and maintaining production automations using tools like N8N or Power Automate
- Strong grounding in security concepts and practices, including encryption standards, data integrity protocols, and the ability to design and apply security policies across a cloud-only Microsoft environment
- Third‑line technical depth, with the instinct to dig into logs and system behaviour independently and the knowledge to work through unfamiliar problems without defaulting to external consultants
- Experience working within an employee‑facing IT function, with a clear understanding of how to balance responsiveness to colleague needs with robust, scalable IT practice
- A service management mindset, including familiarity with change control and continuous improvement processes; awareness of ITIL principles is a bonus, as is experience with ISO 27001 or Cyber Essentials Plus
- Experience with Jamf or Kandji MDM, Atlassian Jira and Jira Service Management administration, or N8N automations would be a welcome addition, but is not essential
Our mission is simple – make heroes happy. Our members are the real‑life heroes who keep us all safe, cared for, and thriving. It's what gets us up in the morning and pushes us to go further, think bigger, and create something that truly matters. By focusing on their happiness, we create amazing experiences, deliver unrivalled discounts, innovative products, and world-class service.
We don't just follow the usual path - we look for smarter, bolder ways to deliver real impact. We take ownership, move fast, and work shoulder to shoulder to build something special.
We're committed to building a diverse and inclusive team where everyone feels they belong. Different perspectives and experiences help us grow, innovate, and better reflect the communities we serve.
We promote hybrid working, and value in‑person collaboration so encourage time in our offices, where you can make the most of our fully stocked snack drawers – either the HQ in Leicestershire, or London, Holborn office. The frequency and office location will vary depending on the role and team. We aim to be flexible, but we aren't able to offer fully remote working.
Blue Light Card is an equal opportunities employer. We believe that employing a diverse workforce is key to our success. We make recruiting decisions based on your experience and skills. In the event of a high number of applications, we'll prioritise candidates who meet both the essential and desirable criteria for the role.
- 25 days annual leave plus public holidays and an additional day off for your birthday
- A Moments that Matter day - one extra day of leave each year to use for something that matters to you
- Buy and sell holiday scheme of up to 5 days
- A volunteering/fundraising day - one paid day each year to give something back to the community
- Annual company bonus scheme - linked to both company and individual performance
- Your own Blue Light Card and exclusive access to thousands of discounts
- Personal growth fund of £450 per year to invest in your development
- Private Medical Insurance that includes cover for pre‑existing conditions
- Auto‑enrolment pension scheme via salary sacrifice, with 100% of employer NI savings reinvested into your pension
- Enhanced Maternity, Partner, Adoption and Shared Parental Leave
- Healthcare cash‑back plan
- Colleague Assistance Programme - 24/7 confidential support whenever you need it
- Hybrid working and flexible hours
- EV charging and free parking onsite at HQ
- Relaxed dress code and modern office space (games area, chill‑out areas, book club, free drinks and well stocked snack drawers!)
- On‑site gym including free HIIT and stretch classes at HQ
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
