Senior IT Support Administrator, FINBOURNE Technology
Plus performance based bonus
Investment management for the modern data era
Open for applications
Investment management for the modern data era
201-500 employees
Open for applications
Plus performance based bonus
201-500 employees
Company mission
To structurally reduce the cost of investing.
Role
Who you are
- Significant hands on experience as a senior IT systems administrator / workplace engineer in a modern SaaS-first environment
- Strong, deep experience with macOS MDM (Kandji, Jamf or equivalent) including blueprint design, ADE, custom profiles and API-driven automation
- Strong, deep experience with Microsoft Intune: Autopilot, update rings, compliance, proactive remediations and BYOD policy
- Expert level Microsoft Entra ID (Azure AD): Conditional Access, device compliance, hybrid join, SSO and Enterprise Apps
- Expert level Okta administration: lifecycle management, SCIM, MFA, SAML / OIDC integrations and external user onboarding
- Microsoft 365 tenant administration including Exchange Online and SharePoint Online (mail flow, DLP, external sharing, licensing)
- Experience in SecOps or working with Microsoft Defender for Endpoint: alert triage, EDR policy and device health
- Comfortable working as a sole IT contributor with high autonomy in a fast-paced, security-conscious environment
- Experience managing a 3rd-party IT MSP relationship from 1st to 3rd line as the internal escalation point
- Experience consuming REST APIs and building lightweight automation across MDM, identity and ITSM tooling
- Strong scripting in PowerShell and Bash / Shell for MDM, Exchange and general automation tasks
- Atlassian suite proficiency (Jira, Confluence) — boards, Jira Service Management, workflows and automation
Desirable
- Experience in financial services, fintech or other regulated environments
- Experience supporting CIS, SOC2 or ISO 27001 audit cycles from the IT side
- Experience running an MDM migration (e.g. between Kandji / Jamf / Hexnode) without business impact
- Experience designing and deploying office networking (Cisco Meraki, UniFi) including site-to-site VPN and VLAN segmentation
- Experience evaluating and onboarding M365 / Entra ID / SaaS backup tooling (e.g. Commvault Cloud)
- Vendor procurement experience: RFPs, quote analysis and contract negotiation, including via platforms such as Vertice
- Experience integrating MDM with identity (Kandji ↔ Entra ID / Okta device trust, Intune compliance signals to Conditional Access)
What the job involves
- We are looking for a Senior IT Support Admin to own and operate FINBOURNE's corporate IT estate — spanning identity and access management, endpoint and device management, workplace security operations, and office infrastructure
- This is a broad, hands-on role that sits at the heart of how FINBOURNE's staff work day-to-day, and requires someone equally comfortable responding to a staff ticket as they are designing a network VLAN or building an Okta lifecycle workflow
- You will be responsible for administering the full SaaS and device estate across macOS and Windows, managing identity platforms including Okta and Microsoft Entra ID, and owning office networking across Cisco Meraki and UniFi
- You will act as the primary internal IT point of contact for all staff, manage the relationship with our third-party MSP, and contribute directly to audit and compliance evidence for SOC2 and ISO
- You will be expected to actively leverage AI tools — including Claude and Claude Code — to automate routine tasks, accelerate scripting, and improve documentation
- Administering Okta (and to a lesser degree Microsoft Entra ID) and internal identity management tools across the joiner / mover / leaver lifecycle for staff and external contractors
- Maintaining Conditional Access policies, MFA enforcement, device compliance signals and SSO integrations across the SaaS estate
- Managing RBAC and entitlement reviews across Microsoft 365, Okta, Atlassian and third-party SaaS applications
- Owning SCIM provisioning, SAML/OIDC integrations and Okta lifecycle workflows for new and existing applications
- Managing 1Password as the enterprise secrets store: vault structure, group access, recovery and offboarding
- Running access reviews and offboarding audits, ensuring complete and timely removal of access on leavers
- Owning the macOS fleet via Kandji: blueprints, ADE / zero-touch enrolment, software deployment, custom .mobileconfig profiles, scripting and patch currency
- Owning the Windows fleet via Microsoft Intune: Autopilot, update rings, feature update convergence, proactive remediations and third-party app delivery
- Defining and maintaining BYOD policies, MDM-to-Entra ID / Okta device trust, and device compliance baselines
- Maintaining CIS Level 1 benchmark compliance across macOS and Windows fleets, including authoring profiles to remediate gaps
- Owning hardware procurement, asset tracking (Jira ITA) and the full device lifecycle (new, refresh, offboarding, secure wipe)
- Triaging and responding to Microsoft Defender for Endpoint alerts; escalating to the security team where appropriate
- Maintaining CIS benchmark coverage and producing audit evidence for SOC2, ISO and customer assurance requests
- Performing eDiscovery and compliance searches in Microsoft 365 in support of Legal and HR investigations
- Driving quarterly security hygiene tasks: stale account cleanup, MFA coverage checks, conditional access reviews, MDM drift detection
- Acting as the workplace-side counterpart to platform security, owning controls on the corporate / staff identity and device estate
- Administering Exchange Online: mail flow rules, transport, shared mailboxes, dynamic distribution lists, anti-spam and anti-phishing posture
- Administering SharePoint Online: new site provisioning, DLP policies, external sharing controls and information barriers
- Managing Microsoft 365 tenant-level configuration, licensing optimisation, and feature rollout
- Supporting Slack, Microsoft Teams, Notion and the Atlassian suite (Jira, Confluence) including access management and workflow / automation configuration
- Owning office networking on Cisco Meraki / UniFi: VLAN design and segmentation, site-to-site VPN, wireless, and physical-access integration
- Operating Microsoft Azure components used by IT: VMs, Key Vault, Automation Accounts, Enterprise Apps and Entra ID integration
- Designing and delivering office build-outs and network refreshes (e.g. Dublin office networking) end-to-end
- Acting as the primary internal IT point of contact for all staff: tickets, walk-ups, escalations and VIP support
- Managing the relationship with the 3rd-party IT MSP across 1st–3rd line, acting as the internal escalation point and quality gate
- Owning vendor relationships (resellers, MDM vendors, SaaS suppliers) and contract / renewal management
- Running vendor selection, quote analysis and procurement via resellers and platforms; building business cases for new tooling
- Maintaining IT runbooks, admin guides and onboarding / offboarding documentation in Notion as the system of record
- Reporting on IT risk, operational posture and project delivery to the CISO and contributing to audit and compliance evidence
- Building lightweight automation across Kandji/Iru, Intune, Entra ID, Okta, Jira and Exchange via REST APIs, PowerShell and Bash / Shell
- Owning automation and runbooks for routine IT tasks (provisioning, reporting, scheduled clean-ups)
- Driving Jira webhook / Atlassian Automation flows for asset intake, device health reporting and service request fulfilment
- Using AI tools (Claude, Claude Code, Copilot) and developing AI Agents to accelerate scripting, runbook authoring, log triage and ticket response
Salary benchmarks
Our take
FINBOURNE is an open platform enabling its customers to make better investment decisions. The company sets itself apart by sharing its processes and contributing to open-source software, with its consumer appeal enhanced by its emphasis on openness and transparency.
FINBOURNE's primary product is LUSID; an open, API-first, and developer-friendly cloud-based investment data platform, that is intended to fundamentally change how investment data is managed. Crucially, LUSID is aimed at everyone in the asset industry, from start-up fund managers to global investment institutions. This universality is one of FINBOURNE's defining qualities and gives it access to a vast and varied marketplace.
Within its first two years, FINBOURNE launched its LUSID Design Council - the result of a collaboration with five leading financial institutions - through which the company shares insights with the wider asset community, which has greatly increased its visibility and credibility within the sector. On top of this, the company received substantial funding in 2024, which is using towards growth plans as it looks to increase its global footprint and expand beyond investment management into banking and capital market customer bases.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
22% employee growth in 12 months
Company
Funding (last 2 of 4 rounds)
Jun 2024
$73.6m
SERIES B
Aug 2021
$20.1m
SERIES A
Total funding: $116.5m
Company HQ
City of London, London, UK
Leadership
Thomas McHugh
(Co-Founder & CEO)They worked for 5 years at RBS, first as Head of Hybrids Quantitative Development. Eventually, they became the Managing Director (Head of Quantitative Development) for Fixed Income.
George Beasley
(Co-Founder & CISO)They have worked as a Senior Engineer at Nimbrix, Senior Software Developer at UBS Investment Bank, and Software Architect at D2see.
Share this job
View 3 more jobs at FINBOURNE Technology