[Hiring] Senior Systems & Fleet Infrastructure Lead @SchoolGrid

Role Description

This is a remote position. We're looking for a Senior Systems & Fleet Infrastructure Lead to take full ownership of our growing estate of commercial POS terminals and edge devices. You will be the senior technical authority for the whole fleet, from hardware sourcing and supplier negotiation through to remote fleet management, patching, and Cyber Essentials compliance. You will bridge low-level hardware procurement and cloud-based fleet operations, establish and run an RMM ecosystem, lead R&D on our embedded hardware platforms, design staged update pipelines, and enforce strict Cyber Essentials compliance across the whole terminal estate.

Please note that we can only accept applications from UK based candidates and are unable to offer sponsorship for this role.

Qualifications

• Deep expertise in Windows 11 IoT, Enterprise deployment, Group Policy/registry tuning, BitLocker, and UEFI/BIOS settings.
• RMM fleet experience. Proven track record using enterprise RMM tools (such as Intune, Atera, or NinjaOne) to manage, patch, and script endpoints at scale.
• Advanced PowerShell scripting. Ability to write clean, production-grade PowerShell scripts for silent deployments, registry modifications, and BitLocker suspension workflows.
• General IT & networking. Solid understanding of TCP/IP, DNS, DHCP, VLANs, host firewalls, and remote access protocols.
• Basic Linux competency. Practical familiarity with Linux command-line tools (bash, systemctl, grep, dmesg, lscpu), and the ability to run firmware flash utilities (AFULNX, fwupd).
• Hardware & firmware understanding. Knowledge of x86 hardware architecture, embedded SoC thermal management (TDP), and AMI BIOS.
• 5+ years of experience in Infrastructure Engineering, Systems Administration, or Terminal Fleet Management.
• Direct experience preparing for or maintaining Cyber Essentials or ISO 27001 certification (Desirable).
• Proven commercial experience evaluating hardware suppliers and negotiating technical PO terms.
• Excellent verbal and written communication skills and confident in managing senior stakeholders.

Requirements

• Hardware sourcing, procurement & vendor management
• Lead the technical evaluation, prototyping, and procurement of embedded x86 motherboard platforms (currently Mini-ITX, Intel N150 SoCs).
• Audit OEM/ODM suppliers to verify active AMI Aptio V BIOS licensing, long-life Intel Extended Servicing Update (ESU) support, and 10-year BOM stability.
• Negotiate volume hardware pricing (1,000-unit batches), custom factory BIOS pre-configuration, and hardware warranty SLAs.
• Manage Product Change Notifications (PCNs), hardware revisions, and End-of-Life (EOL) transitions.
• Fleet management & staging automation (RMM)
• Establish an RMM platform (such as Intune, Atera, or NinjaOne) to monitor, inventory, and manage our fleet of Windows POS terminals.
• Build, test, and stage automated update packages (PowerShell scripts, UEFI Capsule .cab files, silent executable flashers).
• Enforce a strict 14-day patch SLA across all OS, firmware, and third-party software releases to maintain continuous Cyber Essentials certification.
• Design and roll out unique per-device or per-technician credentials, replacing the shared login currently used across the terminal estate.
• Manage disk encryption (BitLocker), remote recovery workflows, and automated system provisioning.
• Level-3 technical escalation & system architecture
• Act as the final technical escalation point for complex incidents that lower-tier technicians cannot resolve.
• Diagnose OS boot issues, UEFI Secure Boot key revocations, microcode updates, and remote recovery routines.
• Configure and harden Windows kiosk mode (Assigned Access) to prevent escape from the SchoolGrid application to the underlying OS or desktop.
• Identity, security & network governance
• Maintain endpoint compliance across Windows, Google Workspace / GCPW, and mobile device management (MDM).
• Audit local administrator privileges, host firewalls, and user account controls across all endpoints.
• Oversee office/site network connectivity, router configurations, VPNs, and firewall policies.

Benefits

• 40 days holiday (including bank holidays) because balance matters
• Remote first approach.
• Ongoing development opportunities, including mentoring from senior leadership
• Supportive, approachable team culture that values initiative and ideas
• Career progression with being part of a fast growing company, bringing great opportunities.