Vacancy at The Felix Project
System Administrator
Salary £ Up to 40,000
London or Sheffield
Details
criminal records.
The Felix Project and FareShare have recently merged to form the UK's largest food redistribution charity. Its vision is a UK where good food is never wasted, and nobody goes hungry.
The organisation rescues high quality edible surplus food, from across the food industry and gets it to over 8,000 organisations across the UK who are working to strengthen communities and improve lives.
The charity manages seven depots across London, Suffolk, Merseyside and Hampshire and works with 16 network partners who operate a further 26 regional depots across the UK.
Over the next year our ambition is to rescue enough food nationally to provide nearly 200 million meals, turning an environmental problem into social good with measurable impact for people, planet, and the economy.
Essential to this role is for the System Administrator to be the technical owner for Microsoft cloud and endpoint management: enabling the merger programme, delivering a secure, standardised M365/Entra/Intune environment, and supporting ISMS and Data Protection implementation through the implementation of Technical Controls, in collaboration with Managed Service Provider.
In addition - be the technical owner of other non-Microsoft platforms, as the organisation merges and rationalises the non-Microsoft platforms in operation.
· Manage Entra ID configuration: users/groups, roles, access governance, Conditional Access, PIM (where used), guest access, SSO integrations.
· Maintain authentication and security posture: MFA enforcement, risky sign-in/user remediation, break-glass account readiness, identity audit readiness.
· Own Intune configuration: device compliance, configuration profiles, security baselines, app deployment, update rings, BitLocker policy/reporting.
· Confirm and improve Windows Autopilot processes: enrolment profiles, device naming, standard build, app packaging, and onboarding experience.
· Support the Data Teams via the implementation and management of integrations between the IT infrastructure and the Data infrastructures. This would include areas such as SSO implementations for key apps.
· Support the limited number of Azure Servers currently operating, with Sharp.
· Defender skills
· Support implementation of DLP & Data Classification policies.
· Support rollout and tuning of E5 security capabilities and/or Email Security Gateway integration
· Improve Exchange and SharePoint/OneDrive configurations: anti-phish/spam policies, mail flow hygiene, external sharing controls, retention/labels where agreed.
· Integrate mobile devices (both COPE and BYOD) into the Entra environment, with support from Sharp
· upport the transition from 8x8 to Teams Voice environment.
· Support technical delivery for domain changes, tenant alignment activities, SSO/cert updates (e.g., Salesforce SSO certificate changes), and application rationalisation.
· Create and maintain technical documentation and SOPs for BAU and audit evidence
· Provide 3rd line support/escalation for Microsoft-related incidents and changes
· Support IT Manager in multi-platform Disaster Recovery exercises and issues.
Your normal duties and responsibilities will be set out in your job description. However, the charity may require you to perform other duties from time to time.
· Proven experience with Entra ID, Conditional Access, and SSO/SAML/OAuth concepts
· Exceptional Intune/Autopilot experience; Windows security baseline and BitLocker management
· Experience managing Exchange Online protection policies and M365 security features
· Ability to document configurations clearly and support audit evidence requirements
· High compliance levels delivered via Autopilot with Standardised endpoint build, user profiles, implementation of RBAC
· Reduced identity and device risk: CA policies effective; non-compliant devices restricted appropriately
· Email and collaboration sharing controls aligned to policy, with reduced exposure
· Key integrations stable (SSO apps, certificate renewals, authentication posture)
· Close co-operation with Sharps Technical Consulting team is expected, due to a high-degree of technical cross-over.
· Defender for Endpoint / Defender for Office 365 experience.
· PowerShell/Graph automation experience.
· Experience supporting ISMS control implementation
At FareShare, we are committed to promoting equality, diversity, and inclusion in everything we do. We value the unique contributions of every individual and strive to create a respectful, inclusive environment free from discrimination or prejudice. Our commitment extends to all employees, and volunteers, ensuring equal opportunities for everyone, regardless of background or characteristics.
Once you apply, you will be directed to our recruitment portal. Please upload your CV and a covering letter outlining your suitability for the role and make sure that they are both uploaded before submitting your application. After you have submitted your application, you have 24 hours in which you can access your application and make edits. We will only consider applications with both CV and cover letter submitted.
We reserve the right to close advertisements early and we might assess candidates and arranging interviews as applications comes in, so please apply as soon as possible, to avoid missing out on this opportunity.
Due to the anticipated large number of applicants, if you do not hear from us within four weeks of your application, we regret to inform you that your application has been unsuccessful. Consequently, will not be able to provide feedback.