Senior Information Technology Engineer

Can you own a problem end to end? Not escalate it. Not document it and pass it on. Own it until it's solved, the client understands what happened, and it doesn't happen again. If that's how you work, keep reading. About nDuo We're a UK-based Managed Service Provider and an Apple Premium Technical Partner. We help regulated businesses, fintechs, banks, hospitality brands and global technology companies run their Apple and Windows fleets securely, compliantly, and without drama. Our clients include Revolut, Kroo, and a range of fintechs, funds and global tech companies.They ask hard questions and expect real answers. Most operate under regulatory scrutiny, which means the work is genuinely technical and the standard is genuinely high. We're now building our engineering capability in Poland, and this is one of the first senior hires into that team. The Role You'll work remotely from anywhere in Poland, supporting our UK client base alongside colleagues in London and South Africa. This is a hybrid engineering and security role. You'll design, build and harden the platforms our clients rely on such as identity, endpoint management, network, and the security controls that sit across all of it. You'll also be the person clients speak to directly when something complex needs solving. Day to day, that means: Building and running secure endpoint estates across macOS and Windows, MDM architecture, configuration profiles, compliance baselines, patching and device lifecycleOwning identity and access - SSO, conditional access, MFA, provisioning and deprovisioning workflows, least-privilege designHardening and defending - endpoint protection, vulnerability management, logging and alerting, and responding when something looks wrongSupporting compliance - helping clients evidence controls for Cyber Essentials, ISO 27001, SOC 2 and their own regulatorsAutomating everything worth automating - if you're doing it by hand twice, you should be scripting itLeading projects from scoping through to delivery, including the client conversations that go with themWorking directly with clients - translating technical detail into language a CTO or a compliance officer can act on Who Thrives Here We can teach tooling. We can't teach the things below, so this is the part that matters most. You solve problems, not tickets. When something lands on your desk that nobody has seen before, your instinct is to dig in, not to hand it back. You're comfortable being the person who works it out. You manage yourself. You'll be trusted with your own workload, your own priorities and your own deadlines, and trusted to flag it early when something is going wrong. You talk to clients directly. You can hold a technical conversation with an engineer and a business conversation with a director, and adjust without losing either of them. You write clearly. You don't hide behind jargon. You find a way through. Vendor won't cooperate. Documentation is wrong. The API doesn't do what it says. You've been there, and you got it done anyway. You care that it's right. Not because someone is watching. Because you can't stand shipping something half-finished. What You'll BringEssential Minimum 5 years in a senior technical IT or security engineering roleAdvanced knowledge of macOS and Microsoft Windows in a business environmentAdvanced scripting ability - Python, Bash, PowerShellAdvanced experience with cloud identity providers (Okta, Microsoft Entra ID / Azure AD)Strong knowledge of MDM platforms (Jamf Pro, Intune; Kandji, Mosyle or FleetDM also welcome)Strong knowledge of Google Workspace and Microsoft 365 administrationSolid networking knowledge - routing, firewalls, VPN, Wi-Fi; Meraki experience particularly valuedPractical endpoint and infrastructure security experience - hardening, patching, endpoint protection, access controlDemonstrable project delivery experience, including client-facing responsibilityFluent spoken and written English, and the confidence to use it with clients dailyLegally able to work in PolandNice to Have Experience in an MSP or consultancy - delivering for multiple clients at paceExposure to Cyber Essentials, ISO 27001, SOC 2 or similar frameworksOkta Workflows, or comparable identity automationInfrastructure as code (Terraform, Ansible) and CI/CD pipelinesEDR/XDR tooling (Jamf Protect, CrowdStrike, SentinelOne, Microsoft Defender)SIEM, logging and alerting platformsIncident response experienceRelevant certifications - Jamf, Okta, Microsoft, CompTIA Security+, or equivalentWorking With Us Hours. Monday to Friday, aligned to UK business hours - 10:00 to 19:00 Polish time, with an hour for lunch. Poland is one hour ahead of the UK, so you'll have full overlap with the London team. Remote, properly. Not remote-with-strings. You work from wherever in Poland suits you. Projects. Some are delivered outside business hours or at weekends. These are always planned well in advance and paid on top. Kit. A MacBook Pro, and whatever hardware and software you need to do the job properly. Certifications. We pay for them. Jamf, Okta, Microsoft, security certifications - if it makes you better at the work, we'll fund it. Why This Role Real autonomy. No layers of sign-off. Weekly rhythms, clear priorities, direct communication. Work that's actually interesting. Regulated fintechs, global tech companies, complex Apple and Windows estates and technical challenges that come with them. A team being built, not inherited. You'll help shape how our Polish capability works, and you'll have direct access to the people making decisions. Growth. We invest in our people. Certifications, new skills, or broader responsibility, there's a clear path for someone who delivers.