Senior IT Engineer

About us Risk Ledger is developing a network of connected organisations, all working together to defend against cybersecurity attacks in the supply chain. Organisations rely on us to establish trust, through sharing their security maturity and visualising the risks posed by their supply chain ecosystem. And we’re already trusted by customers like British Airways, BAE Systems and the NHS. We are putting together an amazing and talented team from a diverse set of backgrounds and skillsets to drive us towards our vision. Risk Ledger is built on the respect we have for one another and our users, united by our shared values and mission. Every one of us is still learning: it’s how we grow as individuals. We’re curious. We’re ambitious. And we’re humble and honest. At Risk Ledger, we aim high to find the best solutions we can and always put our users first. The team: Risk Ledger sells trust. Our product tells customers whether their suppliers are secure, so our own security posture is part of what we sell. We’re ISO 27001 certified, SOC 2 compliant and working towards ISO 42001, and the way we run IT is evidence in those audits. As our Senior IT Engineer, you’ll be the single owner of IT: our people, devices and SaaS estate. You’ll work directly with the Director of Information Security & IT Operations, alongside our Senior SecOps Engineer, supporting every team across our UK and US offices. The team is growing from 3 to 5-6 people over the next 12 months, so you’ll help shape how IT and security work together as we scale. This is an engineering role, not a help desk role. You’ll still run support well, but your impact will come from building the platform: identity, device management, automation and safe AI enablement. In the role you will; Own identity, access and SaaS administration • Administer our cloud identity provider and productivity suite, including users, groups, app access, third-party app controls and mail routing. • Implement and maintain SSO and automated user provisioning (SCIM) across our SaaS estate, and help us move to a dedicated identity platform. • Administer our core business tools, from collaboration and documentation to ticketing, password management and AI tools, keeping access least-privilege and role-based. • Run access changes and privileged-account requests, and support the quarterly access reviews our policies require. Engineer endpoint and device management • Own our MDM platform for a macOS fleet: zero-touch enrolment, configuration profiles, patching, compliance, self-service, and remote lock and wipe. • Build and enforce endpoint controls, including controls on local AI tooling, browser and extension policy, and just-in-time admin elevation. • Manage enrolment of personal devices that access company data. • Prepare for and support the rollout of endpoint detection and response (EDR) with Security Operations. Run joiners, movers and leavers end to end • Own the process from HR trigger to day one and final day, covering hardware, accounts, access changes and offboarding, with no gaps between HR and IT. • Automate wherever you can, and track time-to-onboard and time-to-offboard against an agreed SLA. • Support colleagues in the UK and US, including those employed through third-party arrangements. Operate IT as a service • Own the IT support queue and channels: triage, resolve, and set clear expectations on response times. • Maintain self-help guides and runbooks so common requests become self-service. • Look after hardware, AV, meeting rooms and office technology, including office moves. • Spot recurring issues and fix the cause, not the ticket. Be a security-minded partner to the Director of Information Security • Be the Director’s hands-on IT counterpart, implementing securit