Senior IT Engineer

About us Risk Ledger is developing a network of connected organisations, all working together to defend against cybersecurity attacks in the supply chain. Organisations rely on us to establish trust, through sharing their security maturity and visualising the risks posed by their supply chain ecosystem. And we’re already trusted by customers like British Airways, BAE Systems and the NHS. We are putting together an amazing and talented team from a diverse set of backgrounds and skillsets to drive us towards our vision. Risk Ledger is built on the respect we have for one another and our users, united by our shared values and mission. Every one of us is still learning: it’s how we grow as individuals. We’re curious. We’re ambitious. And we’re humble and honest. At Risk Ledger, we aim high to find the best solutions we can and always put our users first. The team: Risk Ledger sells trust. Our product tells customers whether their suppliers are secure, so our own security posture is part of what we sell. We’re ISO 27001 certified, SOC 2 compliant and working towards ISO 42001, and the way we run IT is evidence in those audits. As our Senior IT Engineer, you’ll be the single owner of IT: our people, devices and SaaS estate. You’ll work directly with the Director of Information Security & IT Operations, alongside our Senior SecOps Engineer, supporting every team across our UK and US offices. The team is growing from 3 to 5-6 people over the next 12 months, so you’ll help shape how IT and security work together as we scale. This is an engineering role, not a help desk role. You’ll still run support well, but your impact will come from building the platform: identity, device management, automation and safe AI enablement. In the role you will; Own identity, access and SaaS administration • Administer our cloud identity provider and productivity suite, including users, groups, app access, third-party app controls and mail routing. • Implement and maintain SSO and automated user provisioning (SCIM) across our SaaS estate, and help us move to a dedicated identity platform. • Administer our core business tools, from collaboration and documentation to ticketing, password management and AI tools, keeping access least-privilege and role-based. • Run access changes and privileged-account requests, and support the quarterly access reviews our policies require. Engineer endpoint and device management • Own our MDM platform for a macOS fleet: zero-touch enrolment, configuration profiles, patching, compliance, self-service, and remote lock and wipe. • Build and enforce endpoint controls, including controls on local AI tooling, browser and extension policy, and just-in-time admin elevation. • Manage enrolment of personal devices that access company data. • Prepare for and support the rollout of endpoint detection and response (EDR) with Security Operations. Run joiners, movers and leavers end to end • Own the process from HR trigger to day one and final day, covering hardware, accounts, access changes and offboarding, with no gaps between HR and IT. • Automate wherever you can, and track time-to-onboard and time-to-offboard against an agreed SLA. • Support colleagues in the UK and US, including those employed through third-party arrangements. Operate IT as a service • Own the IT support queue and channels: triage, resolve, and set clear expectations on response times. • Maintain self-help guides and runbooks so common requests become self-service. • Look after hardware, AV, meeting rooms and office technology, including office moves. • Spot recurring issues and fix the cause, not the ticket. Be a security-minded partner to the Director of Information Security • Be the Director’s hands-on IT counterpart, implementing security controls, policies and improvements across our IT estate and keeping them running. • Bring a security lens to every IT decision, flagging risks early and proposing secure alternatives rather than workarounds. • Configure and tune browser and SaaS security tooling, and act on its alerts, such as leaked credentials and unsanctioned apps. • Run first-line triage on reported phishing and IT-side incident response, including preserving evidence from devices. • Review new tools, integrations and browser extensions against our supplier and AI governance processes before they’re allowed. • Own the IT asset register and keep IT and device controls passing in our compliance platform, with evidence ready for SOC 2, ISO 27001 and Cyber Essentials Plus audits. • Support security projects, policy updates, audits and reporting. Automate, enable AI and scale • Make automation the default. Script, integrate and orchestrate repetitive IT and admin work using scripting, APIs, workflow tools and AI agents, and document what you build. • Build AI-assisted IT operations, such as agents that triage requests, answer common questions from our runbooks, or check tool requests against our approval criteria. • Roll out, configure and administer approved AI tools, connectors and integrations so every team can use them productively and safely. • Put practical guardrails in place in line with our AI policies, covering access scopes, data boundaries, connector and MCP controls, and visibility of what’s in use. • Help colleagues adopt AI well through guides, office hours and quick wins, and feed what you learn into our AI governance. • Evaluate and introduce IT and AI tooling with clear cost and risk trade-offs, help shape the IT roadmap with the Director, and mentor any future IT Ops Engineer. You’ll have; • 4+ years in IT operations or systems administration, including at least 2 in an engineering-led role at a SaaS or similar fast-growing company. • Deep, hands-on administration of a cloud identity provider and productivity suite, including identity, groups, app access and security settings. • Strong experience managing a macOS fleet with an MDM platform: profiles, policies, scripting and zero-touch enrolment. • Experience implementing SSO (SAML/OIDC) and SCIM provisioning across a SaaS estate. • A track record of automating JML and admin work rather than doing it by hand. • Hands-on experience rolling out and administering AI tools in a business, and using AI or workflow automation to make IT operations faster. • Scripting ability in at least one language (such as Bash, Python or JavaScript) and comfort working with REST APIs. • A strong security mindset: least privilege, phishing and credential risk, browser and extension risk, and how IT controls map to audit evidence. The perks: • 💰Competitive base salary • 📈Generous EMI equity package • 👌Private pension • ✈️28 days annual leave + bank holidays • 🏖Additional 30 days of unpaid leave per year to use as you wish • 🎆Ad-hoc companywide time off over the festive period • 🏥Private healthcare with AXA Insurance - including enhanced mental wellbeing coverage • 🏠Hybrid working policy, typically 2-3 days in the office • 👶Enhanced family (parental) leave - gender-neutral policy, 12 weeks paid leave • 👪5 days Caretaker’s leave • 😷Enhanced occupational sick pay • 💻£500 WFH budget • 📚All the learning resources and books you want to aid in your personal development • 🎉 Regular socials to unwind and have some fun Salary range £55,000—£65,000 GBP