TechOps Engineering Lead
Role details
Job location
Tech stack
Job description
As the TechOps Engineering lead you own and set the direction for the team that owns internal technology that enables and protects the company : internal tooling, security, identity and access, devices, networking and day-to-day support. You're the technical owner of our workplace technology - hands-on, but also setting the standards and processes and choosing technologies.
You'll work closely with our infra teams that run our production systems, you're comfortable around cloud and networking (AWS, VPNs, DNS); you're an engineer at heart.
The role spans both ends of the spectrum. You'll plan and shape our tech roadmap, standards, budget and vendors - and you'll also be genuinely hands-on, because no task is too small: some days that means redesigning how our internal VPNs should work, other days it's boxing up a laptop to post to a new joiner or managing a security incident. You're happy doing both.
What you and your team will do:
Identity & access
- Own our Microsoft Entra ID (Microsoft Identity) tenant: identity lifecycle (joiners-movers-leavers), SSO, Conditional Access, MFA, groups and least-privilege access reviews.
- Manage AWS access federated to Entra ID via IAM Identity Center.
Devices & endpoints
- Own device management through Microsoft Intune: provisioning/Autopilot, compliance and security baselines, patching, and asset tracking across laptops and mobile.
- Administer Apple Business Manager and the hardware procurement/e-commerce portal- automated device enrolment (ADE) into Intune, Managed Apple IDs, app/content (VPP) licences, and ordering of Apple devices and accessories.
Microsoft 365 & SaaS administration
- Administer Microsoft 365 (Exchange Online / Outlook, Teams, SharePoint and OneDrive)- mailboxes, distribution/security groups, licences and tenant configuration.
- Administer the rest of the toolchain - Atlassian (Jira/Confluence), Slack, GitHub -including licences, integrations and cost.
Onboarding & offboarding
- Deliver a smooth, secure joiner/leaver experience end to end (Entra accounts, Intune-enrolled hardware, M365 mailbox, VPN, app access).
Networking & connectivity
- Manage office network, Wi-Fi and VPN access; troubleshoot connectivity for on-site and remote staff.
Support & operations
- Be the senior escalation point for internal technical support; resolve the hard tickets and prevent the repeat ones.
- Keep runbooks and documentation current; automate recurring toil with scripting.
- Handle the practical, hands-on side of TechOps: sourcing peripherals and accessories, preparing, shipping and tracking hardware for remote staff, and keeping equipment stock.
Planning & strategy
- Plan and own TechOps staffing, roadmap, standards, budget and vendor/licence relationships, and improve processes as the company grows.
Security & compliance
- Own our internal security.
- Enforce access, MFA and endpoint-hardening standards through Entra ID + Intune; support audits and access-control requirements.
Requirements
- 5+ years in techops operations / workplace technology, including senior/lead- level ownership. You've seen what good looks like.
- Hands-on Microsoft Entra ID (Microsoft Identity) administration- SSO, ConditionalAccess, MFA, identity lifecycle.Strong Microsoft Intune (endpoint management) and Microsoft 365 / Exchange Online administration.
- Solid networking fundamentals - DNS, VPNs, Wi-Fi, firewalls.
- Comfortable around cloud (AWS) - IAM, IAM Identity Center, basic infrastructure concepts- even if you're not building it.
- Scripting/automation (PowerShell, Bash or Python, PowerAutomate), ideally against the Microsoft Graph API.
- Equally at home planning and owning techops strategy and getting hands-on with thepractical, sometimes mundane tasks - no job too big or too small.
- Excellent communication and a genuine service mindset; calm and methodical under pressure.
Nice to have
- AWS depth (IAM Identity Center, Organizations, SSM) and exposure to an engineering CI/CD toolchain (GitHub, CircleCI).
- Microsoft certifications (e.g. MD-102, MS-102, AZ-104) or equivalent.
- Experience in a regulated / financial-data environment.