Senior IT Support Admin

{
  "content_hash": "f903c917332798f3ebefaa850c1a3826e16f186cbb7688565566ea7ca315cf47",
  "source_hash": "0b9d76842f14aac78304328c82cf1bedfa3f81c9ba24ef92a01dc68207d5c3a0",
  "last_changed_at": "2026-05-30T05:44:30.349Z",
  "active_status": "active"
}

{
  "dedupe": null,
  "language": "en",
  "location": {
    "raw": "London, London, City of, EC4V 5ER, United Kingdom",
    "city": "London",
    "region": "London, City of",
    "country": null,
    "is_remote": false,
    "confidence": 0.8
  },
  "salary_max": null,
  "salary_min": null,
  "inferred_at": "2026-06-22T11:01:28.501Z",
  "launch_scope": {
    "reason": "bamboohr_production_catalog",
    "included": true,
    "location": {
      "raw": "London, London, City of, EC4V 5ER, United Kingdom",
      "city": "London",
      "region": "London, City of",
      "country": null,
      "is_remote": false,
      "confidence": 0.8
    },
    "countries": []
  },
  "remote_policy": "hybrid",
  "salary_period": null,
  "workplace_type": "hybrid",
  "salary_currency": null
}

{}

{
  "list_job": {
    "id": "492",
    "isRemote": null,
    "location": {
      "city": "London",
      "state": "London, City of"
    },
    "atsLocation": {
      "city": null,
      "state": null,
      "country": null,
      "province": null
    },
    "departmentId": "18614",
    "locationType": "2",
    "jobOpeningName": "Senior IT Support Admin",
    "departmentLabel": "Internal IT Support",
    "employmentStatusLabel": "Full-Time"
  },
  "detail_errors": [],
  "detail_job_opening": {
    "location": {
      "city": "London",
      "state": "London, City of",
      "postalCode": "EC4V 5ER",
      "addressCountry": "United Kingdom"
    },
    "datePosted": "2026-05-14",
    "atsLocation": {
      "city": null,
      "state": null,
      "country": null,
      "countryId": null
    },
    "description": "<p><span style=\"font-size: 10pt; font-weight: bold\">Role summary</span></p>\n<p><br></p>\n<p><span style=\"font-size: 10pt\">We are looking for a Senior IT Support Admin to own and operate FINBOURNE's corporate IT estate — spanning identity and access management, endpoint and device management, workplace security operations, and office infrastructure. This is a broad, hands-on role that sits at the heart of how FINBOURNE's staff work day-to-day, and requires someone equally comfortable responding to a staff ticket as they are designing a network VLAN or building an Okta lifecycle workflow.</span></p>\n<p><br></p>\n<p><span style=\"font-size: 10pt\">You will be responsible for administering the full SaaS and device estate across macOS and Windows, managing identity platforms including Okta and Microsoft Entra ID, and owning office networking across Cisco Meraki and UniFi. You will act as the primary internal IT point of contact for all staff, manage the relationship with our third-party MSP, and contribute directly to audit and compliance evidence for SOC2 and ISO. You will be expected to actively leverage AI tools — including Claude and Claude Code — to automate routine tasks, accelerate scripting, and improve documentation.</span></p>\n<p><br></p>\n<p><span style=\"font-size: 10pt; font-weight: bold\">Key Responsibilities</span><span style=\"font-size: 10pt\"><br></span></p>\n<p><br></p>\n<p><span style=\"font-size: 10pt\">Identity &amp; Access Management</span><br></p>\n<ul>\n<li><span style=\"font-size: 10pt\">Administering Okta (and to a lesser degree Microsoft Entra ID) and internal identity management tools across the joiner / mover / leaver lifecycle for staff and external contractors</span></li>\n<li><span style=\"font-size: 10pt\">Maintaining Conditional Access policies, MFA enforcement, device compliance signals and SSO integrations across the SaaS estate</span></li>\n<li><span style=\"font-size: 10pt\">Managing RBAC and entitlement reviews across Microsoft 365, Okta, Atlassian and third-party SaaS applications</span></li>\n<li><span style=\"font-size: 10pt\">Owning SCIM provisioning, SAML/OIDC integrations and Okta lifecycle workflows for new and existing applications</span></li>\n<li><span style=\"font-size: 10pt\">Managing 1Password as the enterprise secrets store: vault structure, group access, recovery and offboarding</span></li>\n<li><span style=\"font-size: 10pt\">Running access reviews and offboarding audits, ensuring complete and timely removal of access on leavers</span><br></li>\n</ul>\n<p><br></p>\n<p><span style=\"font-size: 10pt\">Endpoint &amp; Device Management</span></p>\n<ul>\n<li><span style=\"font-size: 10pt\">Owning the macOS fleet via Kandji: blueprints, ADE / zero-touch enrolment, software deployment, custom .mobileconfig profiles, scripting and patch currency</span></li>\n<li><span style=\"font-size: 10pt\">Owning the Windows fleet via Microsoft Intune: Autopilot, update rings, feature update convergence, proactive remediations and third-party app delivery</span></li>\n<li><span style=\"font-size: 10pt\">Defining and maintaining BYOD policies, MDM-to-Entra ID / Okta device trust, and device compliance baselines</span></li>\n<li><span style=\"font-size: 10pt\">Maintaining CIS Level 1 benchmark compliance across macOS and Windows fleets, including authoring profiles to remediate gaps</span></li>\n<li><span style=\"font-size: 10pt\">Owning hardware procurement, asset tracking (Jira ITA) and the full device lifecycle (new, refresh, offboarding, secure wipe)</span><br><br></li>\n</ul>\n<p><span style=\"font-size: 10pt\">Security Operations (Workplace)</span></p>\n<ul>\n<li><span style=\"font-size: 10pt\">Triaging and responding to Microsoft Defender for Endpoint alerts; escalating to the security team where appropriate</span></li>\n<li><span style=\"font-size: 10pt\">Maintaining CIS benchmark coverage and producing audit evidence for SOC2, ISO and customer assurance requests</span></li>\n<li><span style=\"font-size: 10pt\">Performing eDiscovery and compliance searches in Microsoft 365 in support of Legal and HR investigations</span></li>\n<li><span style=\"font-size: 10pt\">Driving quarterly security hygiene tasks: stale account cleanup, MFA coverage checks, conditional access reviews, MDM drift detection</span></li>\n<li><span style=\"font-size: 10pt\">Acting as the workplace-side counterpart to platform security, owning controls on the corporate / staff identity and device estate</span></li>\n</ul>\n<p><br></p>\n<p><span style=\"font-size: 10pt\">Messaging, Collaboration &amp; Microsoft 365</span></p>\n<ul>\n<li><span style=\"font-size: 10pt\">Administering Exchange Online: mail flow rules, transport, shared mailboxes, dynamic distribution lists, anti-spam and anti-phishing posture</span></li>\n<li><span style=\"font-size: 10pt\">Administering SharePoint Online: new site provisioning, DLP policies, external sharing controls and information barriers</span></li>\n<li><span style=\"font-size: 10pt\">Managing Microsoft 365 tenant-level configuration, licensing optimisation, and feature rollout</span></li>\n<li><span style=\"font-size: 10pt\">Supporting Slack, Microsoft Teams, Notion and the Atlassian suite (Jira, Confluence) including access management and workflow / automation configuration</span></li>\n</ul>\n<p><br></p>\n<p><span style=\"font-size: 10pt\">Infrastructure &amp; Networking (Office)</span></p>\n<ul>\n<li><span style=\"font-size: 10pt\">Owning office networking on Cisco Meraki / UniFi: VLAN design and segmentation, site-to-site VPN, wireless, and physical-access integration</span></li>\n<li><span style=\"font-size: 10pt\">Operating Microsoft Azure components used by IT: VMs, Key Vault, Automation Accounts, Enterprise Apps and Entra ID integration</span></li>\n<li><span style=\"font-size: 10pt\">Designing and delivering office build-outs and network refreshes (e.g. Dublin office networking) end-to-end</span></li>\n</ul>\n<p><br></p>\n<p><span style=\"font-size: 10pt\">IT Operations &amp; Service Delivery</span></p>\n<ul>\n<li><span style=\"font-size: 10pt\">Acting as the primary internal IT point of contact for all staff: tickets, walk-ups, escalations and VIP support</span></li>\n<li><span style=\"font-size: 10pt\">Managing the relationship with the 3rd-party IT MSP across 1st–3rd line, acting as the internal escalation point and quality gate</span></li>\n<li><span style=\"font-size: 10pt\">Owning vendor relationships (resellers, MDM vendors, SaaS suppliers) and contract / renewal management</span></li>\n<li><span style=\"font-size: 10pt\">Running vendor selection, quote analysis and procurement via resellers and platforms; building business cases for new tooling</span></li>\n<li><span style=\"font-size: 10pt\">Maintaining IT runbooks, admin guides and onboarding / offboarding documentation in Notion as the system of record</span></li>\n<li><span style=\"font-size: 10pt\">Reporting on IT risk, operational posture and project delivery to the CISO and contributing to audit and compliance evidence</span></li>\n</ul>\n<p><br></p>\n<p><span style=\"font-size: 10pt\">Automation &amp; Tooling</span></p>\n<ul>\n<li><span style=\"font-size: 10pt\">Building lightweight automation across Kandji/Iru, Intune, Entra ID, Okta, Jira and Exchange via REST APIs, PowerShell and Bash / Shell</span></li>\n<li><span style=\"font-size: 10pt\">Owning automation and runbooks for routine IT tasks (provisioning, reporting, scheduled clean-ups)</span></li>\n<li><span style=\"font-size: 10pt\">Driving Jira webhook / Atlassian Automation flows for asset intake, device health reporting and service request fulfilment</span></li>\n<li><span style=\"font-size: 10pt\">Using AI tools (Claude, Claude Code, Copilot) and developing AI Agents to accelerate scripting, runbook authoring, log triage and ticket response</span></li>\n</ul>\n<p><br></p>\n<p><span style=\"font-weight: bold\">Skills and Experience</span></p>\n<p><br></p>\n<p><span style=\"font-size: 10pt\">Experience Required</span></p>\n<ul>\n<li><span style=\"font-size: 10pt\">Significant hands on experience as a senior IT systems administrator / workplace engineer in a modern SaaS-first environment</span></li>\n<li><span style=\"font-size: 10pt\">Strong, deep experience with macOS MDM (Kandji, Jamf or equivalent) including blueprint design, ADE, custom profiles and API-driven automation</span></li>\n<li><span style=\"font-size: 10pt\">Strong, deep experience with Microsoft Intune: Autopilot, update rings, compliance, proactive remediations and BYOD policy</span></li>\n<li><span style=\"font-size: 10pt\">Expert level Microsoft Entra ID (Azure AD): Conditional Access, device compliance, hybrid join, SSO and Enterprise Apps</span></li>\n<li><span style=\"font-size: 10pt\">Expert level Okta administration: lifecycle management, SCIM, MFA, SAML / OIDC integrations and external user onboarding</span></li>\n<li><span style=\"font-size: 10pt\">Microsoft 365 tenant administration including Exchange Online and SharePoint Online (mail flow, DLP, external sharing, licensing)</span></li>\n<li><span style=\"font-size: 10pt\">Experience in SecOps or working with Microsoft Defender for Endpoint: alert triage, EDR policy and device health</span></li>\n<li><span style=\"font-size: 10pt\">Comfortable working as a sole IT contributor with high autonomy in a fast-paced, security-conscious environment</span></li>\n<li><span style=\"font-size: 10pt\">Experience managing a 3rd-party IT MSP relationship from 1st to 3rd line as the internal escalation point</span></li>\n<li><span style=\"font-size: 10pt\">Experience consuming REST APIs and building lightweight automation across MDM, identity and ITSM tooling</span></li>\n<li><span style=\"font-size: 10pt\">Strong scripting in PowerShell and Bash / Shell for MDM, Exchange and general automation tasks</span></li>\n<li><span style=\"font-size: 10pt\">Atlassian suite proficiency (Jira, Confluence) — boards, Jira Service Management, workflows and automation</span></li>\n</ul>\n<p><br></p>\n<p><span style=\"font-size: 10pt\">Experience Nice To Have</span></p>\n<ul>\n<li><span style=\"font-size: 10pt\">Experience in financial services, fintech or other regulated environments</span></li>\n<li><span style=\"font-size: 10pt\">Experience supporting CIS, SOC2 or ISO 27001 audit cycles from the IT side</span></li>\n<li><span style=\"font-size: 10pt\">Experience running an MDM migration (e.g. between Kandji / Jamf / Hexnode) without business impact</span></li>\n<li><span style=\"font-size: 10pt\">Experience designing and deploying office networking (Cisco Meraki, UniFi) including site-to-site VPN and VLAN segmentation</span></li>\n<li><span style=\"font-size: 10pt\">Experience evaluating and onboarding M365 / Entra ID / SaaS backup tooling (e.g. Commvault Cloud)</span></li>\n<li><span style=\"font-size: 10pt\">Vendor procurement experience: RFPs, quote analysis and contract negotiation, including via platforms such as Vertice</span></li>\n<li><span style=\"font-size: 10pt\">Experience integrating MDM with identity (Kandji ↔ Entra ID / Okta device trust, Intune compliance signals to Conditional Access)</span></li>\n</ul>\n<p><br></p>\n<p><span style=\"font-size: 10pt\"><span style=\"font-weight: bold\"><span style=\"font-size: 12pt\">Just some of our benefits</span><br></span></span></p>\n<p><br></p>\n<ul>\n<li><span style=\"font-size: 10pt\">Competitive salary plus performance based bonus. The bonus is based on a grading system which will include a mix of cash, and in some cases, Stock Options<br></span></li>\n<li><span style=\"font-size: 10pt\">Health &amp; Wellbeing: A competitive health insurance policy that disregards previous medical history. This also includes dental, optical, mental health support and comprehensive cancer cover.</span></li>\n<li><span style=\"font-size: 10pt\">Cycle to work scheme and Gym discounts: Buy a bike and cycling accessories out of your pre-tax salary and spread the cost over 12 months, as well huge discounts off Hussle, KOBOX and Nuffield Health gyms</span></li>\n<li><span style=\"font-size: 10pt\">Hybrid working: We operate a hybrid model, with a flexible approach to working in our offices around the world. We’re committed to helping you be productive in a way that works best for you and FINBOURNE<br></span></li>\n<li><span style=\"font-size: 10pt\">Professional learning and development: External training and accreditations are supported, as well internal training and development programs.</span></li>\n<li><span style=\"font-size: 10pt\">Maternity, paternity and adoption leave: Paid maternity, paternity and adoption leave, which includes 13 weeks full pay for maternity and adoption leave and 6 weeks full pay for paternity leave<br></span></li>\n<li><span style=\"font-size: 10pt\">Holiday: 25 days holiday plus bank holidays and the ability to purchase an additional 5 days leave per year. We also offer a day off for your birthday. </span></li>\n<li><span style=\"font-size: 10pt\">Celebration of your work anniversaty: As a token of appreciation for the contribution and commitment of our <br>employees, we award a £50 Amazon voucher to employees each year on their work anniversary. </span></li>\n</ul>\n<p><br></p>\n<p><span><span style=\"font-weight: bold\">About FINBOURNE</span></span></p>\n<p><span> </span><br></p>\n<p><span style=\"font-size: 10pt\">We are a young, dynamic financial technology company aiming to re-engineer the world of investing to make it clearer, faster and more cost effective for everyone.</span></p>\n<p><br></p>\n<p><span style=\"font-size: 10pt\">At FINBOURNE, we offer a hugely supportive environment to build a career, with continuous learning and development opportunities. We have a collaborative culture of testing and exploring problems together to find the best evidence-based solutions. We respect your independent thought, your intellectual curiosity and your opinion.</span><br></p>\n<p><br></p>\n<p><span style=\"font-size: 10pt\">Our solution is open, API first and developer friendly – a true first for the asset management industry. You can see what our team is busy building on Github.</span><br></p>\n<p><br></p>\n<p><span style=\"font-size: 10pt\">For more information about us please visit our website.</span></p>",
    "compensation": null,
    "departmentId": "18614",
    "locationType": "2",
    "seekPromoted": false,
    "jobCategoryId": null,
    "jobOpeningName": "Senior IT Support Admin",
    "departmentLabel": "Internal IT Support",
    "jobOpeningStatus": "Open",
    "minimumExperience": "Experienced",
    "jobOpeningShareUrl": "https://finbourne.bamboohr.com/careers/492",
    "employmentStatusLabel": "Full-Time"
  }
}