Contract Type: 12-Month Fixed Term Contract
Location: London or Sheffield (Hybrid working afforded)
Working days/hours per week: 35 hours per week, Monday to Friday, 9am to 5pm.
Requirements: We can only employ applicants who currently have the right to work in the UK. As part of our safer recruitment policy, we do ask questions regarding unspent criminal records.
Our Vision: A UK where “No good food goes to waste”.
The Felix Project and FareShare have recently merged to form the UK's largest food redistribution charity. Its vision is a UK where good food is never wasted, and nobody goes hungry. The organisation rescues high quality edible surplus food from across the food industry and gets it to over 8,000 organisations across the UK who are working to strengthen communities and improve lives.
The charity manages seven depots across London, Suffolk, Merseyside and Hampshire and works with 16 network partners who operate a further 26 regional depots across the UK. Over the next year our ambition is to rescue enough food nationally to provide nearly 200 million meals, turning an environmental problem into social good with measurable impact for people, planet, and the economy.
Purpose of the Job
Essential to this role is for the System Administrator to be the technical owner for Microsoft cloud and endpoint management: enabling the merger programme, delivering a secure, standardised M365/Entra/Intune environment, and supporting ISMS and Data Protection implementation through the implementation of Technical Controls, in collaboration with Managed Service Provider. In addition – be the technical owner of other non‑Microsoft platforms, as the organisation merges and rationalises the non‑Microsoft platforms in operation.
Duties and Responsibilities
* Manage Entra ID configuration: users/groups, roles, access governance, Conditional Access, PIM (where used), guest access, SSO integrations.
* Maintain authentication and security posture: MFA enforcement, risky sign‑in/user remediation, break‑glass account readiness, identity audit readiness.
Endpoint management (Intune)
* Own Intune configuration: device compliance, configuration profiles, security baselines, app deployment, update rings, BitLocker policy/reporting.
* Confirm and improve Windows Autopilot processes: enrolment profiles, device naming, standard build, app packaging, and onboarding experience.
* Support the Data Teams via the implementation and management of integrations between the IT infrastructure and the Data infrastructures, including SSO implementations for key apps.
* Support the limited number of Azure Servers currently operating, with Sharp.
Email security & collaboration controls
* Support implementation of DLP & Data Classification policies.
* Support rollout and tuning of E5 security capabilities and/or Email Security Gateway integration.
* Improve Exchange and SharePoint/OneDrive configurations: anti‑phish/spam policies, mail flow hygiene, external sharing controls, retention/labels where agreed.
* Integrate mobile devices (both COPE and BYOD) into the Entra environment, with support from Sharp.
* Support the transition from 8x8 to Teams Voice environment.
* Support technical delivery for domain changes, tenant alignment activities, SSO/cert updates (e.g., Salesforce SSO certificate changes), and application rationalisation.
Operational excellence
* Create and maintain technical documentation and SOPs for BAU and audit evidence.
* Provide 3rd line support/escalation for Microsoft‑related incidents and changes.
* Support IT Manager in multi‑platform Disaster Recovery exercises and issues.
Qualifications
* Proven experience with Entra ID, Conditional Access, and SSO/SAML/OAuth concepts.
* Exceptional Intune/Autopilot experience; Windows security baseline and BitLocker management.
* Experience managing Exchange Online protection policies and M365 security features.
* Ability to document configurations clearly and support audit evidence requirements.
* High compliance levels delivered via Autopilot with Standardised endpoint build, user profiles, implementation of RBAC.
* Reduced identity and device risk: CA policies effective; non‑compliant devices restricted appropriately.
* Email and collaboration sharing controls aligned to policy, with reduced exposure.
* Key integrations stable (SSO apps, certificate renewals, authentication posture).
* Close co‑operation with Sharps Technical Consulting team is expected, due to a high‑degree of technical cross‑over.
* PowerShell/Graph automation experience.
* Experience supporting ISMS control implementation.
Equity Diversity Inclusion & Belonging
At FareShare, we are committed to promoting equality, diversity, and inclusion in everything we do. We value the unique contributions of every individual and strive to create a respectful, inclusive environment free from discrimination or prejudice. Our commitment extends to all employees and volunteers, ensuring equal opportunities for everyone, regardless of background or characteristics.
#J-18808-Ljbffr