Blue Light Card. Individually great, together unstoppable
The Role and the Team When something breaks across BLC's technology, or a big change needs a steady technical hand, this is the person colleagues turn to. Our IT Operations team keeps the digital workplace running smoothly for everyone who works to make heroes happy, and we're looking for a senior engineer to help take that to the next level. This is a senior individual contributor role and the top-line technical escalation point for our wider IT environment. You'll own the design and continuous improvement of our most complex and business-critical systems, spanning hardware, networks, Microsoft services and SaaS platforms, and you'll be responsible for how well they perform, how secure they are, and how resilient they stay as we grow. There's no line management, but you'll mentor senior and mid-level engineers and set the technical standards the team works to. You'll report to the IT Operations Manager. You'll work closely with senior stakeholders, suppliers and colleagues across the business, and alongside our AI and Automation Engineer where automations touch the shared platform. Expect plenty of hands-on work: scripting, automating and fixing things properly, as well as shaping the direction our technology takes. What You'll Do Own the security, performance and reliability of our core systems end to end, from infrastructure and endpoint management to business applications
Act as the top-line technical escalation point, diagnosing complex incidents through logs and system behaviour and running root cause work so recurring issues are fixed for good
Shape technical design choices and a technology roadmap that supports company goals, backed by clear business cases for significant change
Administer and improve Microsoft 365 and Entra ID, and support the adoption, integration and standardisation of SaaS and cloud services across the business
Build PowerShell scripts and production-grade workflow automations, in tools such as n8n or Power Automate, to take manual effort out of provisioning, patching and reporting
Design and maintain security controls such as Conditional Access, device compliance and Zero Trust access, and guide vulnerability management, audits and resilience testing
Partner with stakeholders to scope and deliver IT projects, including migrations, upgrades and integrations, and manage supplier relationships, licensing and cost
Mentor and coach senior and mid-level engineers, and advise senior stakeholders in plain language on risk and options
What You'll Bring Extensive background in IT systems engineering, including senior or third-line level, with a strong record of independently owning complex, high-impact technical problems end to end
Expert hands-on experience administering Microsoft 365 and Entra ID in a cloud-only environment, including Intune, Conditional Access and Autopilot, plus Apple Automated Device Enrolment and SAML and SCIM provisioning, ideally backed by Microsoft certification such as MS-102 or SC-300
Strong experience managing the device lifecycle across Windows and macOS, with in-depth knowledge of networking (DNS, DHCP, VLANs, VPNs, firewalls, Wi-Fi and cloud networking) and Zero Trust access
A strong grounding in security architecture and operations, including identity and access management, least privilege, vulnerability management and incident response, and a certification such as CCNA or Security+ or equivalent
Advanced hands-on PowerShell, including Microsoft Graph and REST APIs, and extensive experience building production automations in n8n or comparable tools, with a sound understanding of OAuth, app registrations and secrets management
Hands-on experience deploying and governing enterprise AI tools such as Claude, ChatGPT Enterprise or Microsoft Copilot, including SSO, data protection controls and connecting them safely to business systems via APIs and MCP
Experience working within ITIL-aligned service management, explaining risk and options clearly to senior non-technical stakeholders, and mentoring engineers. Experience with ISO 27001 or Cyber Essentials Plus, Jamf or Kandji, or Jira Service Management would be a bonus, but is not essential
Our Culture Our mission is simple: make heroes happy. Our members are real-life heroes who keep us all safe, cared for, and thriving. It's what gets us up in the morning, what makes us want to think bigger, and create something that truly matters. By focusing on their happiness, we create amazing experiences, deliver unrivalled discounts, innovative products, and world-class service. We don't just follow the usual path - we look for smarter, bolder ways to deliver real impact. We take ownership, move fast, and work shoulder to shoulder to build something special. We promote hybrid working, and value in-person collaboration so encourage time in our offices – either the HQ in Leicestershire, or London, Holborn office. The frequency and office location will vary depending on the role and team. We aim to be flexible, but we aren't able to offer fully remote working. Blue Light Card is an equal opportunities employer. We're committed to building a diverse and inclusive team where different perspectives and experiences help us grow, innovate, and better reflect the communities we serve. We make recruiting decisions based on your experience and skills. In the event of a high number of applications, we'll prioritise candidates who meet both the essential and desirable criteria for the role. What We Offer 25 days annual leave plus public holidays and an additional day off for your birthday
A Moments that Matter day – one extra day of leave each year to use for something that matters to you
Buy and sell holiday scheme of up to 5 days
A volunteering/fundraising day – one paid day each year to give something back to the community
Annual company bonus scheme – linked to both company and individual performance
Your own Blue Light Card and exclusive access to thousands of discounts
Personal growth fund of £450 per year to invest in your development
Private Medical Insurance that includes cover for pre-existing conditions
Auto-enrolment pension scheme via salary sacrifice, with 100% of employer NI savings reinvested into your pension
Enhanced Maternity, Partner, Adoption and Shared Parental Leave
Healthcare cash-back plan
Colleague Assistance Programme – 24/7 confidential support whenever you need it
Hybrid working and flexible hours
EV charging and free parking onsite at HQ
Relaxed dress code and modern office space (games area, chill-out areas, book club, free drinks and well stocked snack drawers!)
On-site gym including free HIIT and stretch classes at HQ
#LI-Hybrid
Lead IT Operations Systems Engineer in Loughborough employer: Blue Light Card
At Blue Light Card, we pride ourselves on being an exceptional employer that champions the happiness of our members and employees alike. Our vibrant work culture fosters collaboration and innovation, with a strong emphasis on personal growth through a dedicated development fund and flexible working arrangements. Located in Leicestershire or London, we offer a range of benefits including generous annual leave, private medical insurance, and a supportive environment that values diversity and inclusion.
