System Administrator

Job Title: System Administrator

Reporting To: IT Security Manager

Salary Range: Up to £40,000

Contract Type: 12-Month Fixed Term Contract

Location: London or Sheffield (Hybrid working afforded)

Working days/hours per week: 35 hours per week, Monday to Friday, 9am to 5pm.

Our Vision: A UK where No good food goes to waste .

The Felix Project and FareShare have recently merged to form the UK's largest food redistribution charity. Its vision is a UK where good food is never wasted, and nobody goes hungry.

The organisation rescues high quality edible surplus food, from across the food industry and gets it to over 8,000 organisations across the UK who are working to strengthen communities and improve lives.

The charity manages seven depots across London, Suffolk, Merseyside and Hampshire and works with 16 network partners who operate a further 26 regional depots across the UK.

Over the next year our ambition is to rescue enough food nationally to provide nearly 200 million meals, turning an environmental problem into social good with measurable impact for people, planet, and the economy.

Purpose of the Job

Essential to this role is for the System Administrator to be the technical owner for Microsoft cloud and endpoint management: enabling the merger programme, delivering a secure, standardised M365/Entra/Intune environment, and supporting ISMS and Data Protection implementation through the implementation of Technical Controls, in collaboration with Managed Service Provider.

In addition - be the technical owner of other non-Microsoft platforms, as the organisation merges and rationalises the non-Microsoft platforms in operation.

Duties and Responsibilities

M365 / Entra ID

• Manage Entra ID configuration: users/groups, roles, access governance, Conditional Access, PIM (where used), guest access, SSO integrations.
• Maintain authentication and security posture: MFA enforcement, risky sign-in/user remediation, break-glass account readiness, identity audit readiness.

Endpoint management (Intune)

• Own Intune configuration: device compliance, configuration profiles, security baselines, app deployment, update rings, BitLocker policy/reporting.
• Confirm and improve Windows Autopilot processes: enrolment profiles, device naming, standard build, app packaging, and onboarding experience.

Azure Data

• Support the Data Teams via the implementation and management of integrations between the IT infrastructure and the Data infrastructures. This would include areas such as SSO implementations for key apps.
• Support the limited number of Azure Servers currently operating, with Sharp.

Email security & collaboration controls

• Defender skills
• Support implementation of DLP & Data Classification policies.
• Support rollout and tuning of E5 security capabilities and/or Email Security Gateway integration
• Improve Exchange and SharePoint/OneDrive configurations: anti-phish/spam policies, mail flow hygiene, external sharing controls, retention/labels where agreed.

Telephony / Entra Integration

• Integrate mobile devices (both COPE and BYOD) into the Entra environment, with support from Sharp
• Support the transition from 8x8 to Teams Voice environment.

Merger enablement

• Support technical delivery for domain changes, tenant alignment activities, SSO/cert updates (e.g., Salesforce SSO certificate changes), and application rationalisation.

Operational excellence

• Create and maintain technical documentation and SOPs for BAU and audit evidence
• Provide 3rd line support/escalation for Microsoft-related incidents and changes
• Support IT Manager in multi-platform Disaster Recovery exercises and issues.

Your normal duties and responsibilities will be set out in your job description. However, the charity may require you to perform other duties from time to time.

Recruitment Timeline

We reserve the right to close advertisements early and we might assess candidates and arranging interviews as applications comes in, so please apply as soon as possible, to avoid missing out on this opportunity.

Due to the anticipated large number of applicants, if you do not hear from us within four weeks of your application, we regret to inform you that your application has been unsuccessful. Consequently, will not be able to provide feedback.