Senior IT Systems Engineer

Job title:Senior IT Systems Engineer
Location: UK
Position Type: Full-time
Experience Level: 5+ years

About the role

VE3 is looking for a hands-on Senior IT Systems Engineer to support and administer our Microsoft 365 environment and strengthen security across company devices and accounts.

You will configure laptops, implement and maintain Microsoft Intune, troubleshoot technical issues and take ownership of support tickets through to resolution. Working with colleagues across the UK and India, you will ensure employees have reliable IT services and secure access to company systems.

This is a technical individual contributor role. You will coordinate with other IT team members on tickets and technical work, with no formal people-management responsibility.

Requirements

Key responsibilities

Microsoft 365 and identity

• Configure, administer and troubleshoot Microsoft 365 services, including Exchange Online, Teams, SharePoint Online and OneDrive.
  
• Administer Microsoft Entra ID, including users, groups, enterprise applications and access permissions.
  
• Implement and troubleshoot multifactor authentication, Conditional Access and single sign-on.
  
• Configure role-based access, privileged access controls and separate administrator accounts.
  
• Complete employee onboarding, role changes and offboarding, including account provisioning, licence allocation and access removal.
  
• Troubleshoot email delivery, authentication, collaboration and synchronisation issues.
  
• Review and secure external sharing, guest access and tenant settings.
  

Intune and device engineering

• Implement, configure and maintain Microsoft Intune for company laptops and mobile devices.
  
• Configure Windows Autopilot for consistent device provisioning and deployment.
  
• Build and maintain device configuration profiles, compliance policies and endpoint security policies.
  
• Package, deploy, update and troubleshoot applications through Intune.
  
• Configure BitLocker encryption, Windows update policies, endpoint protection and local administrator controls.
  
• Diagnose device enrolment failures, policy conflicts, application deployment issues and compliance failures.
  
• Set up and support Windows laptops, with support for macOS, iOS and Android where required.
  
• Manage device allocation, recovery, remote wipe and secure reassignment, maintaining accurate asset records.
  

Microsoft security

• Configure and support Microsoft Defender for Endpoint and Defender for Office 365, according to available licensing.
  
• Investigate endpoint, identity and email security alerts; contain threats and remediate affected accounts or devices.
  
• Implement protection against phishing, malware, compromised credentials and unauthorised access.
  
• Configure access restrictions for unmanaged or non-compliant devices.
  
• Implement controls to restrict the download or sharing of confidential company information.
  
• Identify security configuration gaps and implement practical improvements.
  
• Configure and maintain Windows LAPS, endpoint hardening and least-privilege access.
  
• Maintain technical evidence and documentation to support security reviews and audits.
  

Hands-on IT support

• Monitor the internal support queue and prioritise incidents and requests according to urgency and business impact.
  
• Take ownership of tickets from investigation through to resolution, keeping users informed.
  
• Coordinate with IT colleagues to assign or escalate issues and ensure effective handovers.
  
• Provide remote troubleshooting for laptops, Microsoft 365, connectivity, applications and peripherals.
  
• Investigate recurring problems and implement permanent fixes.
  
• Escalate complex issues to Microsoft or other suppliers and follow them through to resolution.
  
• Write clear troubleshooting guides, configuration records and support procedures.
  

Automation and reliability

• Use PowerShell to automate routine administration, reporting and support tasks.
  
• Test configuration changes before deployment and document rollback steps.
  
• Monitor device health, patch status and compliance, resolving failures proactively.
  
• Support recovery testing and maintain reliable administrative access procedures.
  
• Recommend technical improvements that reduce manual work and improve the employee experience.
  

Essential skills and experience

• Strong hands-on experience in a systems engineer, Microsoft 365 engineer, endpoint engineer or senior IT support role.
  
• Practical Microsoft 365 administration across Exchange Online, Teams, SharePoint Online and OneDrive.
  
• Proven experience configuring and troubleshooting Microsoft Intune, including enrolment, compliance, configuration profiles and application deployment.
  
• Experience with Windows Autopilot and Windows device provisioning.
  
• Strong knowledge of Microsoft Entra ID, MFA, Conditional Access and access permissions.
  
• Practical experience with Microsoft Defender and endpoint security controls.
  
• Strong Windows troubleshooting skills, including investigating logs, policy application and device performance.
  
• Working knowledge of DNS, DHCP, networking and secure remote access.
  
• Ability to write and troubleshoot PowerShell scripts.
  
• Experience working with ticketing systems and supporting remote employees.
  
• Ability to independently investigate technical problems and take them through to resolution.
  
• Clear communication and thorough technical documentation.
  

Desirable skills and experience

• Experience administering macOS, iOS and Android devices through Intune.
  
• Familiarity with Microsoft Purview, sensitivity labels and data loss prevention.
  
• Experience with privileged identity management and access reviews.
  
• Familiarity with Cloudflare or similar secure access technologies.
  
• Experience supporting Cyber Essentials or ISO 27001 controls.
  
• Relevant Microsoft certifications in endpoint administration, Microsoft 365, identity or security.
  

What we are looking for

A technically strong engineer who enjoys configuring systems, troubleshooting difficult issues and improving security. You should be comfortable working directly in administration portals, endpoint tooling and PowerShell, while providing responsive and approachable support to employees.