> Markdown version of [/jobs/ext/1186212-internal-it-manager](https://www.wearedevelopers.com/jobs/ext/1186212-internal-it-manager). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Internal IT Manager - **Company:** Aquis Exchange - **Location:** London, UK (Remote available) - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Active Directory, Microsoft Azure, Microsoft Online Services, Dynamic Host Configuration Protocol, Linux, Domain Name System (DNS), Virtual Private Networks (VPN), Network Troubleshooting, Microsoft Servers, Public Key Infrastructure, Cloud Services, Runbook, Microsoft SharePoint, Software Licensing Audit, Software Deployment, Software Engineering, Software Vulnerability Management, Microsoft InTune, Information Technology, Patch Management, Hardware Infrastructure, Unified Endpoint Management - **Published:** July 5, 2026 - **Apply:** https://uk.indeed.com/viewjob?jk=dc0238b6f4ab0565 ## About the Role * Proven operational infrastructure support experience, with a track record of delivering reliable IT services in a fast-paced environment. * At least 5 years of hands-on experience supporting Windows operating systems in an enterprise setting. * Strong Microsoft Server administration skills (2016/2019/2022), including Active Directory, Group Policy (GPO), DHCP, DNS, and NPS. * Solid understanding of PKI concepts and certificate lifecycle management, including Active Directory Certificate Services (AD CS) and third-party CAs, as well as integration with Intune for device certificate deployment. * Proven experience managing Microsoft 365 services, including Intune, SharePoint, and Teams. * Expert-level knowledge of Microsoft Intune Endpoint Management, including device enrolment, compliance policies, and configuration profiles. * Demonstrated ability to troubleshoot endpoint VPN connectivity and networking issues across a distributed user base. * Solid understanding of patch management and endpoint security practices, including vulnerability remediation and compliance reporting. * Experience working in a regulated financial services or similarly compliance-driven environment, with an understanding of the audit and change control requirements that entails. * Ability to effectively prioritise and execute tasks in a dynamic environment, balancing competing demands without compromising quality. * Excellent verbal and written communication skills, with the ability to convey technical concepts clearly to non-technical stakeholders. * Strong analytical and problem-solving ability, with a proactive approach to identifying issues early and proposing practical solutions. ## Description Aquis Exchange is looking to hire a Senior Desktop Support Engineer to own and evolve our Microsoft endpoint and server estate across London and Paris. This is a hands-on technical leadership role: you will manage a small and growing Desktop Support team while maintaining deep personal ownership of 3rd line escalations, PKI and certificate lifecycle, MDM policy, and the day-to-day reliability of our Windows environment. The role sits within a tight-knit Infrastructure function and operates at the intersection of endpoint management and core server infrastructure., * Lead and develop the Desktop Support Team, providing day-to-day management, mentorship, and performance oversight and reporting to maintain a high-performing support function. * Own 3rd Line Desktop Support, handling escalated hardware and software issues to resolution and ensuring reliable operation of endpoints across Aquis offices and for remote users. * Manage and evolve Aquis's Microsoft environment, spanning both on-premise infrastructure and cloud services (Microsoft 365 / Azure), ensuring availability, security, and scalability. * Define, implement, and maintain MDM and patch management policies, ensuring consistent, timely, and auditable deployment of updates across the device estate. * Design, implement, and manage Group Policy Objects (GPOs) and Active Directory structures, ensuring policies governing security, software deployment, and user configuration are well-defined, documented, and consistently enforced across the estate. * Manage the lifecycle of digital certificates across the estate, including issuing, renewing, and revoking certificates via internal PKI (AD CS) and third-party CAs, ensuring uninterrupted authentication for endpoints, users, and services. * Maintain and continuously improve hardware and software build standards, conducting regular audits to enforce software compliance and licensing obligations company-wide. * Implement and uphold approved IT procedures, including change control, and joiner/mover/leaver processes. ensuring consistency, auditability, and alignment with internal policy. * Plan and execute IT projects, including software rollouts, hardware refresh cycles, and infrastructure upgrades, coordinating with stakeholders and managing delivery to schedule. * Manage vendor relationships and coordinate hardware and software procurement, ensuring value for money, timely delivery, and alignment with approved standards. * Produce and maintain accurate, up-to-date technical documentation covering configurations, processes, and runbooks. * Collaborate with the Linux and Network teams on cross-functional initiatives and provide cover or assistance as operational needs required ## Related Videos - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Leverage Cloud Computing Benefits with Serverless Multi-Cloud ML ](https://www.wearedevelopers.com/videos/78-leverage-cloud-computing-benefits-with-serverless-multi-cloud-ml) - [Technical Documentation - How Can I Write Them Better and Why Should I Care?](https://www.wearedevelopers.com/videos/681-technical-documentation-how-can-i-write-them-better-and-why-should-i-care) - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [ZEISS & Microsoft - Building the Next Generation Medical Ecosystem in the Cloud](https://www.wearedevelopers.com/videos/424-zeiss-microsoft-building-the-next-generation-medical-ecosystem-in-the-cloud) - [Navigating the Corporate Jungle: Life as a Developer in a large Company](https://www.wearedevelopers.com/videos/621-navigating-the-corporate-jungle-life-as-a-developer-in-a-large-company) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023) - [UK Business Culture and Etiquette](https://www.wearedevelopers.com/magazine/326-uk-business-culture-and-etiquette) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)