Internal IT Manager

Type of Employment: Permanent

Location: London

Aquis maintains a presence in both the UK and EU (primarily Paris). Aquis operates a hybrid working environment with a mixture of office and working from home days. In London we currently operate a minimum of 3 days working in the office.

Reports To: Head of Infrastructure

Job Overview: Aquis Exchange is looking to hire a Senior Desktop Support Engineer to own and evolve our Microsoft endpoint and server estate across London and Paris. This is a hands‑on technical leadership role: you will manage a small and growing Desktop Support team while maintaining deep personal ownership of 3rd line escalations, PKI and certificate lifecycle, MDM policy, and the day‑to‑day reliability of our Windows environment. The role sits within a tight‑knit Infrastructure function and operates at the intersection of endpoint management and core server infrastructure.

Responsibilities and Duties:

• Lead and develop the Desktop Support Team, providing day‑to‑day management, mentorship, and performance oversight and reporting to maintain a high‑performing support function.
• Own 3rd Line Desktop Support, handling escalated hardware and software issues to resolution and ensuring reliable operation of endpoints across Aquis offices and for remote users.
• Manage and evolve Aquis's Microsoft environment, spanning both on‑premise infrastructure and cloud services (Microsoft 365 / Azure), ensuring availability, security, and scalability.
• Define, implement, and maintain MDM and patch management policies, ensuring consistent, timely, and auditable deployment of updates across the device estate.
• Design, implement, and manage Group Policy Objects (GPOs) and Active Directory structures, ensuring policies governing security, software deployment, and user configuration are well‑defined, documented, and consistently enforced across the estate.
• Manage the lifecycle of digital certificates across the estate, including issuing, renewing, and revoking certificates via internal PKI (AD CS) and third‑party CAs, ensuring uninterrupted authentication for endpoints, users, and services.
• Maintain and continuously improve hardware and software build standards, conducting regular audits to enforce software compliance and licensing obligations company‑wide.
• Implement and uphold approved IT procedures, including change control, and joiner/mover/leaver processes, ensuring consistency, auditability, and alignment with internal policy.
• Plan and execute IT projects, including software rollouts, hardware refresh cycles, and infrastructure upgrades, coordinating with stakeholders and managing delivery to schedule.
• Manage vendor relationships and coordinate hardware and software procurement, ensuring value for money, timely delivery, and alignment with approved standards.
• Produce and maintain accurate, up‑to‑date technical documentation covering configurations, processes, and runbooks.
• Collaborate with the Linux and Network teams on cross‑functional initiatives and provide cover or assistance as operational needs required.

Required Skills and Experience:

• Proven operational infrastructure support experience, with a track record of delivering reliable IT services in a fast‑paced environment.
• At least 5 years of hands‑on experience supporting Windows operating systems in an enterprise setting.
• Strong Microsoft Server administration skills (2016/2019/2022), including Active Directory, Group Policy (GPO), DHCP, DNS, and NPS.
• Solid understanding of PKI concepts and certificate lifecycle management, including Active Directory Certificate Services (AD CS) and third‑party CAs, as well as integration with Intune for device certificate deployment.
• Proven experience managing Microsoft 365 services, including Intune, SharePoint, and Teams.
• Expert‑level knowledge of Microsoft Intune Endpoint Management, including device enrolment, compliance policies, and configuration profiles.
• Demonstrated ability to troubleshoot endpoint VPN connectivity and networking issues across a distributed user base.
• Solid understanding of patch management and endpoint security practices, including vulnerability remediation and compliance reporting.
• Experience working in a regulated financial services or similarly compliance‑driven environment, with an understanding of the audit and change control requirements that entails.
• Ability to effectively prioritise and execute tasks in a dynamic environment, balancing competing demands without compromising quality.
• Excellent verbal and written communication skills, with the ability to convey technical concepts clearly to non‑technical stakeholders.
• Strong analytical and problem‑solving ability, with a proactive approach to identifying issues early and proposing practical solutions.

About Aquis Exchange:

Aquis Exchange (“Aquis”) is Europe’s challenger exchange, creating better markets for a modern economy. Aquis has market‑leading technology and innovative rules for trading, and offers primary listings and secondary trading of equities, along with global licensing of proprietary technology.

Aquis consists of four divisions: Aquis Markets operates lit and dark order books, covering 16 European markets. For its lit books, Aquis uses a subscription pricing model which works by charging users according to the message traffic they generate, rather than a percentage of the value of each stock that they trade. Aquis Technologies is the software and technology division of Aquis. It focuses on building better markets via the creation and licensing of cutting‑edge, cost‑effective exchange infrastructure technology and services, including matching engine and trade surveillance solutions. Aquis Stock Exchange (“AQSE”) is a stock market providing primary and secondary markets for equity securities. It is authorised as a Recognised Investment Exchange, which allows it to operate a regulated listings venue. The AQSE Growth Market is divided into two segments ‘Access’ and ‘Apex'; the Access market focuses on earlier stage growth companies, while Apex is the intended market for larger, more established businesses. Aquis Data generates revenue from the sale of data derived from Aquis Markets and Aquis Stock Exchange to non‑Member market participants. Aquis is authorised and regulated by the UK Financial Conduct Authority and France's Autorité de contrôle prudentiel et de résolution and L’Autorité des marchés financiers to operate Multilateral Trading Facility businesses in the UK & Switzerland markets and in EU27 markets, respectively. Aquis is part of SIX: the provider and operator of stable and efficient infrastructure for the Swiss and Spanish financial centres.

Our Culture:

At Aquis, we’re proud of our culture - one built on trust, collaboration, and accountability. We work fast, support one another, and share responsibility for both our successes and our lessons learned. Our values guide how we work every day:

• Win as One: We collaborate, share knowledge, and celebrate collective success.
• Disrupt Positively: We challenge the status quo and look for smarter, better ways to do things.
• Find Joy: We take pride in our work and enjoy what we do, even when it’s challenging.
• Act with Honour: We do the right thing, with integrity and respect for others.

You’ll join a supportive, ambitious, and diverse team where ideas are encouraged and innovation is part of our DNA. We recruit talented people from all walks of life and empower them to make an impact. If our values resonate with you, Aquis could be the ideal place to grow your career.

The statements included in this job description are intended to describe the general nature and level of work being performed by people assigned to this job. They are not intended to be an exhaustive list of all responsibilities, duties and skills required.

Equal opportunities at Aquis Exchange. We are an equal‑opportunities employer. All applicants will receive consideration for employment without regard to race, gender, colour, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status.