Group IT - Senior IT Engineer

Security & Compliance

• Monitor, investigate, and respond to security incidents and alerts across Microsoft Defender, Mimecast, and Darktrace.
• Maintain and demonstrate compliance with Cyber Security Essentials.
• Implement and enforce security best practices across all platforms and services.
• Periodically review and assess system vulnerabilities; produce and track remediation plans.
• Oversee day-to-day operations and administration of the Microsoft 365 and Azure tenant, including Exchange Online, SharePoint, Teams, and OneDrive.
• Manage Azure services including Entra ID (identity, SSO, Conditional Access), Defender for Cloud, Microsoft Purview, and related security tooling.
• Maintain and optimise Intune MDM/MAM policies, app deployments, compliance policies, and device configuration profiles across Windows, macOS and iOS., * Manage and maintain network infrastructure including switches, routers, and firewalls, with particular focus on Meraki MX/MS/MR platforms.
• Administer on-premise and hybrid server infrastructure, ensuring availability, performance, and security.
• Oversee cloud backup strategies using Druva or equivalent solutions for Microsoft 365 and on-premise devices.

Projects & Technology Evaluation

• Plan, coordinate, and execute software and hardware migrations, upgrades, and refresh cycles.
• Evaluate new technologies and provide well-reasoned recommendations for integration into the existing environment.
• Stay current with the latest technological trends, Microsoft product roadmap, and emerging security threats.
• Provide guidance, mentorship, and day-to-day technical support to IT Engineers.
• Diagnose and resolve complex technical issues, acting as an escalation point for the wider IT team.
• Collaborate with cross-functional teams across the wider IT department and business stakeholders.
• Create and maintain detailed, accurate technical documentation covering systems, processes, and procedures.

At Sanderson Design Group, we are always looking for talented, ambitious and motivated people to join our team.

We are seeking an experienced and proactive Senior IT Engineer to join our IT team. Reporting to our IT Operations Manager you will take ownership of our cloud and on-premise infrastructure, lead security operations, and provide technical leadership to junior colleagues. You will play a key part in shaping the reliability, security, and continuous improvement of our technology environment.

Please note: this role will require travel across multiple sites primarily between Loughborough and Milton Keynes with an expectation of 3 days per week on site., The successful candidate will demonstrate strong working knowledge across the following:

• Microsoft Defender suite (Endpoint, Identity, Office 365, Cloud Apps)
• Microsoft Purview (compliance, data governance, information protection)

Networking & Infrastructure

• Meraki MX (firewall/SD-WAN), MS (switching), and MR (wireless) platforms
• TCP/IP networking, VLAN segmentation, DNS, DHCP, and VPN technologies
• Windows Server administration (Active Directory, Group Policy, DNS/DHCP)
• Cloud backup platforms (Druva InSync or equivalent) for Microsoft 365 and endpoint devices
• Intune Win32 app packaging, ADMX/ADMX-backed policy management, and compliance policies

Security & Compliance

• Cyber Security Essentials framework requirements and audit processes
• Mimecast or equivalent email security platforms
• Microsoft Defender, Darktrace or equivalent AI-driven network detection and response (NDR) tools, Required:
• Minimum 5 years of experience in a Senior IT Engineer or IT Engineer role within a Microsoft-centric environment.
• Microsoft Certified: Azure Security Engineer Associate (AZ-500) or Microsoft Security, Compliance, and Identity Fundamentals / SC-500.
• ITIL Foundation certification or working knowledge of ITIL service management principles.
• Familiarity with PowerShell scripting for M365/Azure automation., * A methodical, analytical approach to problem-solving with strong attention to detail.
• Excellent written and verbal communication skills; able to explain technical concepts clearly to non-technical stakeholders.
• Self-motivated and proactive, with the ability to manage competing priorities and work autonomously.
• A collaborative team player who actively supports and develops colleagues.
• Committed to continuous professional development and keeping skills current.
• Ability to work in high-pressure situations, maintaining composure and effectiveness.