Systems Administrator

Newcastle upon Tyne, UK (Hybrid)

As TDS continues to grow, the demands of our technology function have never been greater. Each engagement brings its own hardware, software, and security requirements, and ensuring our people are equipped, provisioned, and supported from day one is critical to our ability to deliver. We are looking for a Systems Administrator to own this function end‑to‑end.

This is a hybrid role – your time will be split between working from home and working in our Newcastle office.

• Full lifecycle device management across Windows and Apple platforms – from provisioning and deployment to maintenance, security, and decommissioning.
• Windows Device Management – Microsoft Intune & Autopilot: enroll, enforce compliance, configure devices, automate provisioning with Autopilot, manage deployment groups,
  perform device wipes and re-provisioning, monitor health and compliance dashboards.
• Apple Device Management – Manage Engine MDM: provision and distribute Mac Books, iPads, iPhones; manage profiles, app deployments, configuration policies; conduct maintenance checks; coordinate returns, re‑imaging, and redeployment; maintain an accurate asset register.

• Create, maintain, and enforce endpoint security policies for Windows and Apple fleets.
• Manage conditional access, device compliance baselines, and data protection settings via Intune and Manage Engine.
• Respond to security alerts, investigate and remediate issues promptly.
• Support periodic security audits and internal device management reviews.
• Ensure devices meet client‑specific security requirements, including encryption, patch levels, and configuration standards.

• Allocate and distribute software licences for new starters; track usage and flag renewals or overuse.
• Coordinate with HR and People Operations to complete onboarding checklists and ready equipment before start dates.
• Manage software deployment via Intune and MDM tooling to ensure consistent installation.

• Administer user accounts – provisioning, modification, deprovisioning.
• Manage group memberships, RBAC, and permissions; process joiners, movers, leavers efficiently.
• Liaise with stakeholders to grant correct access for client engagements.
• Maintain documentation of access policies, user accounts, and IDM processes.

• 2+ years in IT support, device management, or endpoint engineering.
• Experience managing Windows devices with Microsoft Intune and Autopilot.
• Experience with Apple MDM tooling (Manage Engine, Jamf, or equivalent).
• Background in consultancy, professional services, or a high‑growth scale‑up is advantageous.
• Comfortable supporting a technically diverse user base with varied hardware and software.

• Solid understanding of Microsoft Intune (device enrolment, compliance policies, configuration profiles, Autopilot).
• Working knowledge of Apple MDM (device supervision, profile management, app deployment, remote wipe).
• Familiarity with identity and access management concepts (Azure AD / Entra , group policies, RBAC, SSO).
• Understanding of endpoint security principles (encryption, conditional access, patch management, compliance baselines).
• Experience with software licence management and asset tracking tooling.

• Hands‑on experience with Microsoft Intune for device enrolment, compliance policies, configuration profiles, and Autopilot deployments.
• Practical working knowledge of at least one cloud platform (Azure, Google Workspace, or AWS) in an enterprise or managed environment.
• Confidence administering both Windows and macOS at an endpoint level, including configuration, troubleshooting, and policy management.

• 3rd line support experience – ability to own and resolve complex infrastructure or endpoint issues beyond helpdesk scope.
• Scripting skills – writing or maintaining Power Shell or Bash scripts to automate routine device management, provisioning, or reporting tasks.

• Highly organised with strong attention to detail – manage multiple provisioning tasks concurrently.
• Clear communicator able to explain technical issues to non‑technical stakeholders.
• Self‑starter who takes ownership and drives issues to resolution.
• Collaborative team player working closely with HR, Operations, and Delivery for seamless onboarding and off‑boarding.
• Comfortable in a fast‑paced environment where priorities can shift quickly.

Successful applicants to this role will receive all the benefits of working at TDS.

• Competitive Salary
• 25 days holiday + Bank Holidays
• Hybrid Working and flexible working hours
• Contributory Pension Scheme & Salary Sacrifice
• Progression opportunities
• Discretionary Bonus Scheme
• BUPA Health & Dental care
• Perkbox Benefits & discount Scheme
• Central Office Location
• Equipment provided
• Monthly Social Events
• Cycle to Work Scheme
• Company Away Weekend
• TDS Merchandise