Senior IT Systems Engineer

VE3; Maidenhead; On-site; GBP 65,000 - 90,000; Full time

Job summary

VE3 is a technology and business consultancy seeking a Senior IT Systems Engineer to support and secure our Microsoft 365 environment. You will administer Intune, enforce MFA/Conditional Access, and strengthen device security for colleagues in the UK and India.

You will configure laptops, manage Windows Autopilot, automate tasks with PowerShell, and own tickets from investigation to resolution, collaborating with IT peers while maintaining clear documentation.

Qualifications

• 5+ years in a senior IT systems/engineering role.
• Hands-on Microsoft 365 administration across Exchange Online, Teams, SharePoint, OneDrive.
• Experience with Intune, enrolment, compliance, and app deployment.
• Experience with Windows Autopilot and device provisioning.
• Knowledge of Entra ID, MFA, Conditional Access and permissions.

Responsibilities

• Configure and troubleshoot Microsoft 365 services and Entra ID.
• Manage Intune for laptops and mobile devices and device provisioning.
• Provide hands-on IT support and resolve tickets to resolution.
• Apply security controls with Defender and endpoint protection.
• Automate tasks with PowerShell and maintain runbooks.

Skills

Microsoft 365 engineer

Endpoint security

PowerShell scripting

IT support experience

Security engineering

Tools

Intune

Windows Autopilot

Entra ID

Defender for Endpoint

LAPS

Job description

VE3 is a technology and business consultancyfocused on delivering end-to-end technology solutions and products. We havesuccessfully serviced enterprises across multiple markets, including the publicand private sectors. Our services span all aspects of business, providing aholistic approach to managing an organization. We are committed to providingtechnical innovations and tools that empower organizations with criticalinformation to facilitate decision-making that results in businesstransformation through cost savings and increased operational efficiency. Ourcommitment to quality is adopted throughout the organization and sets thefoundation for delivering our full suite of capabilities.

Job Description

Job title:Senior IT Systems Engineer

Position Type: Full-time

Experience Level: 5+ years

About the role

VE3 is looking for a hands-on Senior IT Systems Engineer to support and administer our Microsoft 365 environment and strengthen security across company devices and accounts.

You will configure laptops, implement and maintain Microsoft Intune, troubleshoot technical issues and take ownership of support tickets through to resolution. Working with colleagues across the UK and India, you will ensure employees have reliable IT services and secure access to company systems.

This is a technical individual contributor role. You will coordinate with other IT team members on tickets and technical work, with no formal people-management responsibility.

Requirements

Key responsibilities

Microsoft 365 and identity

• Configure, administer and troubleshoot Microsoft 365 services, including Exchange Online, Teams, SharePoint Online and OneDrive.
  
• Administer Microsoft Entra ID, including users, groups, enterprise applications and access permissions.
  
• Implement and troubleshoot multifactor authentication, Conditional Access and single sign-on.
  
• Configure role-based access, privileged access controls and separate administrator accounts.
  
• Complete employee onboarding, role changes and offboarding, including account provisioning, licence allocation and access removal.
  
• Troubleshoot email delivery, authentication, collaboration and synchronisation issues.
  
• Review and secure external sharing, guest access and tenant settings.
  

Intune and device engineering

• Implement, configure and maintain Microsoft Intune for company laptops and mobile devices.
  
• Configure Windows Autopilot for consistent device provisioning and deployment.
  
• Build and maintain device configuration profiles, compliance policies and endpoint security policies.
  
• Package, deploy, update and troubleshoot applications through Intune.
  
• Configure BitLocker encryption, Windows update policies, endpoint protection and local administrator controls.
  
• Diagnose device enrolment failures, policy conflicts, application deployment issues and compliance failures.
  
• Set up and support Windows laptops, with support for macOS, iOS and Android where required.
  
• Manage device allocation, recovery, remote wipe and secure reassignment, maintaining accurate asset records.
  

Microsoft security

• Configure and support Microsoft Defender for Endpoint and Defender for Office 365, according to available licensing.
  
• Investigate endpoint, identity and email security alerts; contain threats and remediate affected accounts or devices.
  
• Implement protection against phishing, malware, compromised credentials and unauthorised access.
  
• Configure access restrictions for unmanaged or non-compliant devices.
  
• Implement controls to restrict the download or sharing of confidential company information.
  
• Identify security configuration gaps and implement practical improvements.
  
• Configure and maintain Windows LAPS, endpoint hardening and least-privilege access.
  
• Maintain technical evidence and documentation to support security reviews and audits.
  

Hands-on IT support

• Monitor the internal support queue and prioritise incidents and requests according to urgency and business impact.
  
• Take ownership of tickets from investigation through to resolution, keeping users informed.
  
• Coordinate with IT colleagues to assign or escalation issues and ensure effective handovers.
  
• Provide remote troubleshooting for laptops, Microsoft 365, connectivity, applications and peripherals.
  
• Investigate recurring problems and implement permanent fixes.
  
• Escalate complex issues to Microsoft or other suppliers and follow them through to resolution.
  
• Write clear troubleshooting guides, configuration records and support procedures.
  

Automation and reliability

• Use PowerShell to automate routine administration, reporting and support tasks.
  
• Test configuration changes before deployment and document rollback steps.
  
• Monitor device health, patch status and compliance, resolving failures proactively.
  
• Support recovery testing and maintain reliable administrative access procedures.
  
• Recommend technical improvements that reduce manual work and improve the employee experience.
  

Essential skills and experience

• Strong hands-on experience in a systems engineer, Microsoft 365 engineer, endpoint engineer or senior IT support role.
  
• Practical Microsoft 365 administration across Exchange Online, Teams, SharePoint Online and OneDrive.
  
• Proven experience configuring and troubleshooting Microsoft Intune, including enrolment, compliance, configuration profiles and application deployment.
  
• Experience with Windows Autopilot and Windows device provisioning.
  
• Strong knowledge of Microsoft Entra ID, MFA, Conditional Access and access permissions.
  
• Practical experience with Microsoft Defender and endpoint security controls.
  
• Strong Windows troubleshooting skills, including investigating logs, policy application and device performance.
  
• Working knowledge of DNS, DHCP, networking and secure remote access.
  
• Ability to write and troubleshoot PowerShell scripts.
  
• Experience working with ticketing systems and supporting remote employees.
  
• Ability to independently investigate technical problems and take them through to resolution.
  
• Clear communication and thorough technical documentation.
  

Desirable skills and experience

• Experience administering macOS, iOS and Android devices through Intune.
  
• Familiarity with Microsoft Purview, sensitivity labels and data loss prevention.
  
• Experience with privileged identity management and access reviews.
  
• Familiarity with Cloudflare or similar secure access technologies.
  
• Experience supporting Cyber Essentials or ISO 27001 controls.
  
• Relevant Microsoft certifications in endpoint administration, Microsoft 365, identity or security.
  

What we are looking for

A technically strong engineer who enjoys configuring systems, troubleshooting difficult issues and improving security. You should be comfortable working directly in administration portals, endpoint tooling and PowerShell, while providing responsive and approachable support to employees.