> Markdown version of [/jobs/ext/2857091-senior-systems-fleet-infrastructure-lead-remote-uk](https://www.wearedevelopers.com/jobs/ext/2857091-senior-systems-fleet-infrastructure-lead-remote-uk). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Systems & Fleet Infrastructure Lead - Remote UK - **Company:** SchoolGrid - **Location:** Shipley, UK (Remote available) - **Experience:** Expert - **Salary:** £69,801.0 - **Contract:** Permanent contract - **Skills:** Microsoft Access, Microsoft Windows, Bash Shell, BIOS, BitLocker Drive Encryption, Dynamic Host Configuration Protocol, Linux, Domain Name System (DNS), Firmware, Virtual Private Networks (VPN), Linux Commands, Network Connections, Performance Tuning, Windows PowerShell, Remote Access Technology, Kiosk Mode, Systems Architecture, TCP/IP, Virtual Local Area Networks, Extensible Firmware Interface, Firewalls (Computer Science), Microsoft InTune, Information Technology, Grep, Gsuite, U-Boot, Firewall Services Module - **Published:** September 12, 2026 - **Apply:** https://www.adzuna.co.uk/jobs/details/5880521413 ## About the Role * Deep expertise in Windows 11 IoT, Enterprise deployment, Group Policy/registry tuning, BitLocker, and UEFI/BIOS settings. * RMM fleet experience. Proven track record using enterprise RMM tools (such as Intune, Atera, or NinjaOne) to manage, patch, and script endpoints at scale. * Advanced PowerShell scripting. Ability to write clean, production-grade PowerShell scripts for silent deployments, registry modifications, and BitLocker suspension workflows. * General IT & networking. Solid understanding of TCP/IP, DNS, DHCP, VLANs, host firewalls, and remote access protocols. * Basic Linux competency. Practical familiarity with Linux command-line tools (bash, systemctl, grep, dmesg, lscpu), and the ability to run firmware flash utilities (AFULNX, fwupd). * Hardware & firmware understanding. Knowledge of x86 hardware architecture, embedded SoC thermal management (TDP), and AMI BIOS. * 5+ years of experience in Infrastructure Engineering, Systems Administration, or Terminal Fleet Management. * Direct experience preparing for or maintaining Cyber Essentials or ISO 27001 certification (Desirable). * Proven commercial experience evaluating hardware suppliers and negotiating technical PO terms. * Excellent verbal and written communication skills and confident in managing senior stakeholders. ## Description We're looking for a Senior Systems & Fleet Infrastructure Lead to take full ownership of our growing estate of commercial POS terminals and edge devices. You will be the senior technical authority for the whole fleet, from hardware sourcing and supplier negotiation through to remote fleet management, patching, and Cyber Essentials compliance. You will bridge low-level hardware procurement and cloud-based fleet operations, establish and run an RMM ecosystem, lead R&D on our embedded hardware platforms, design staged update pipelines, and enforce strict Cyber Essentials compliance across the whole terminal estate., Hardware sourcing, procurement & vendor management * Lead the technical evaluation, prototyping, and procurement of embedded x86 motherboard platforms (currently Mini-ITX, Intel N150 SoCs). * Audit OEM/ODM suppliers to verify active AMI Aptio V BIOS licensing, long-life Intel Extended Servicing Update (ESU) support, and 10-year BOM stability. * Negotiate volume hardware pricing (1,000-unit batches), custom factory BIOS pre-configuration, and hardware warranty SLAs. * Manage Product Change Notifications (PCNs), hardware revisions, and End-of-Life (EOL) transitions. Fleet management & staging automation (RMM) * Establish an RMM platform (such as Intune, Atera, or NinjaOne) to monitor, inventory, and manage our fleet of Windows POS terminals. * Build, test, and stage automated update packages (PowerShell scripts, UEFI Capsule .cab files, silent executable flashers). * Enforce a strict 14-day patch SLA across all OS, firmware, and third-party software releases to maintain continuous Cyber Essentials certification. * Design and roll out unique per-device or per-technician credentials, replacing the shared login currently used across the terminal estate. * Manage disk encryption (BitLocker), remote recovery workflows, and automated system provisioning. Level-3 technical escalation & system architecture * Act as the final technical escalation point for complex incidents that lower-tier technicians cannot resolve. * Diagnose OS boot issues, UEFI Secure Boot key revocations, microcode updates, and remote recovery routines. * Configure and harden Windows kiosk mode (Assigned Access) to prevent escape from the SchoolGrid application to the underlying OS or desktop. Identity, security & network governance * Maintain endpoint compliance across Windows, Google Workspace / GCPW, and mobile device management (MDM). * Audit local administrator privileges, host firewalls, and user account controls across all endpoints. * Oversee office/site network connectivity, router configurations, VPNs, and firewall policies. ## Related Videos - [Remote Driving on Plant Grounds with State-of-the-Art Cloud Technologies](https://www.wearedevelopers.com/videos/251-remote-driving-on-plant-grounds-with-state-of-the-art-cloud-technologies) - [10M Data Records Lost, Underwater Computing, and Psychedelic Fish - Matthias Geniar](https://www.wearedevelopers.com/videos/1908-10m-data-records-lost-underwater-computing-and-psychedelic-fish-matthias-geniar) - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [Fleet Management - Reinvented](https://www.wearedevelopers.com/videos/473-fleet-management-reinvented) - [How to Submit CFPs and Get into Public Speaking - Moran Weber](https://www.wearedevelopers.com/videos/2112-how-to-submit-cfps-and-get-into-public-speaking-moran-weber) - [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker) ## Related Articles - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Mastering Remote Work: Tips for Developers](https://www.wearedevelopers.com/magazine/558-mastering-remote-work-tips-for-developers) - [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers) - [A Guide to Green Tech and Green IT Careers](https://www.wearedevelopers.com/magazine/374-a-guide-to-green-tech-and-green-it-careers)