Junior Software Engineer (IT Systems & Security)

As a Junior Software Engineer (IT Systems & Security), you will be the architect of the end‑user experience. Your first 12 months will focus on Modern Endpoint Engineering; designing how we deploy, manage, and automate our fleet of laptops via MDM, reviewing our VPN and access approach and assisting with our push to achieve ISO27001 accreditation. In your second 12 months, you will leverage this foundational knowledge to pivot into Security Engineering, focusing on threat hunting, hardening, and incident response across the entire infrastructure. There will also be opportunities to get involved across our full engineering scope and our push to become known as the AI Freight Forwarder through automations and AI integrations. Throughout this time, you will be able to leverage your close relationship with your infrastructure teammates and manager to build a career path into the future.

Key Responsibilities

• MDM Administration: Lead the configuration and maintenance of our MDM platform (e.g., Microsoft Intune, Jamf, or Kandji).
• Support & Process Engineering: Take ownership of the IT ticketing system, building out automation for common requests and defining the standard operating procedures (SOPs) for the support team.
• Zero-Touch Deployment: Design and optimize "Autopilot" or "DEP" workflows so laptops can be shipped directly to users and configured automatically.
• Application Packaging: Create and maintain a library of automated application deployments and updates.
• Hardware Lifecycle: Manage the technical standards for the laptop fleet, including firmware security and hardware performance benchmarking.
• IT Service Delivery: Act as the first point of contact for technical escalations, using "detective work" to solve complex bugs and hardware issues.
• AI for Productivity: Use N8N or Scripting to automate repetitive configuration tasks on remote endpoints.
• ISO27001: Become deeply involved with the process of getting our ISO27001 certification.
• Endpoint Detection & Response (EDR): Manage and tune our security agents (e.g., CrowdStrike, SentinelOne, or Defender for Endpoint).
• Vulnerability Management: Use MDM data to identify out-of-date software and hardware vulnerabilities, then automate the remediation.
• Hardening Standards: Implement CIS Benchmarks and "Conditional Access" policies to ensure only healthy devices can access company data.
• Incident Response: Act as the primary technical responder for security alerts originating from the laptop fleet.

Skills, Knowledge and Expertise

• MDM Exposure: Basic familiarity with or desire to learn managing devices via a central console (Intune, Jamf, Meraki, etc.).
• Technical Scripting: Exposure to Python or similar languages; you should find it interesting to automate data analysis and routine tasks.
• Systems Curiosity: A deep interest in macOS and Windows 10/11 troubleshooting and a desire to understand how global fleets are managed.
• Networking: Understanding of how laptops connect securely (VPN, DNS, Wi‑Fi 6, ZTNA).
• Problem‑Solving Mindset: You enjoy the "detective work" of figuring out how to fix a bug or why a deployment failed.
• Automation: Proficiency in advanced scripting for system‑level changes.
• Security Frameworks: Understanding of NIST or Essential Eight frameworks.
• Compliance: Learning how to prove to auditors that our "fleet is secure" via data and reporting.