IT Systems Administrator

About the role

We're looking for an early-career IT generalist to take on the day-to-day administration of a Cloud-centric environment — identity, endpoints, collaboration, and the cloud services that sit behind them. This is a hands-on role with genuine breadth. You'll work across AWS, Entra ID, Microsoft 365, Intune, Windows 11, networking, and Azure/AWS fundamentals, supported by a senior team who will give you direction and review your work.

You don't need to know all of it on day one. You do need to be curious, methodical, and comfortable saying "I don't know yet — let me find out and come back to you." A large part of the job is turning what you learn into documentation: runbooks, implementation guides, and repeatable procedures that make the next person's job easier.

Key responsibilities

• Administer users, groups, and group membership in Microsoft Entra ID, including dynamic groups
• Manage licence assignment and reclamation
• Administer Conditional Access policies under guidance — creating, testing, and documenting changes
• Manage Privileged Identity Management (PIM) role assignments, activations, and approvals
• Configure and troubleshoot authentication methods, MFA registration, and password reset
• Administer Teams, channels, and channel permissions
• Build and maintain compliance policies and configuration profiles in Intune
• Administer Windows Autopilot enrolment, profiles, and deployment
• Manage local users, groups, permissions, BitLocker encryption, and Windows Firewall configuration
• Research technical problems independently and develop operational runbooks and implementation guides

About you

• Working familiarity with the Microsoft 365 and Entra ID admin experience
• Confident troubleshooting Windows 11 on real hardware
• Basic networking knowledge — IP addressing, DNS, wireless, firewalls
• Clear written English, and the discipline to document what you did
• Comfortable working in a ticketing or task-tracked environment
• A genuine willingness to learn and comfort with not knowing
• Asks questions and seeks direction when encountering unfamiliar changes
• Communicates progress updates, blockers, and clear handovers with the team
• Desirable: Exposure to Intune, Autopilot, or Android enterprise management
• Desirable: Experience with VPN or Zero Trust network access (Twingate, Tailscale, or similar)