This is not just a senior technical position — it is a leadership role within the team. We are looking for someone who takes genuine ownership: of problems, of standards, of team capability, and of the overall service we deliver to Trainliners. You will be the go-to person when things get complex, the one who sets the bar for quality, and the one who actively lifts others to reach it.
You will work closely with the Workplace Technology Lead, acting as a technical anchor for the team — driving consistency, mentoring your peers, championing best practices, and making sure nothing important falls through the cracks. If you see something that isn't right, you fix it. If a junior engineer is stuck, you help them through it. If a process is broken, you own improving it.
As a Senior IT Support Analyst, you'll be responsible for... 🚝
Technical Leadership & Team Ownership
• Acting as the technical escalation point for the team — owning complex incidents end-to-end and ensuring nothing stalls without clear direction
• Mentoring and upskilling junior and mid-level engineers: pairing on problems, reviewing their work, and sharing knowledge deliberately and consistently
• Setting and maintaining quality standards for ticket management, documentation, and technical investigations across the team
• Driving team readiness — identifying skill gaps, flagging them to the Lead, and taking initiative to close them through coaching or knowledge sessions
• Leading by example in attitude, thoroughness, communication, and follow-through — shaping the team culture through daily behaviour
• Supporting the Workplace Technology Lead with operational decisions, workload balancing, and service improvements
Incident, Problem & Request Management
• Owning the full incident lifecycle for complex and high-priority issues — from triage and investigation through to resolution and post-incident review
• Conducting deep root cause analysis: reviewing logs, correlating cross-system patterns, engaging third-party vendors, and documenting findings clearly
• Ensuring the team's ticket queue is healthy — proactively monitoring dashboards, reassigning where needed, and preventing SLA breaches before they happen
• Driving problem management: identifying recurring incidents, initiating investigations, and leading permanent fix efforts rather than accepting repeat workarounds
• Owning escalation quality — ensuring issues are fully investigated, clearly documented, and appropriately packaged before being escalated to Tier 3 or vendors
Microsoft 365, Azure AD & Identity Management
• Advanced administration of Microsoft 365 services: Exchange Online, SharePoint, Teams, OneDrive, and the M365 Security & Compliance Centre
• Azure Active Directory: user and group lifecycle, Conditional Access policy design and troubleshooting, SSPR, MFA enforcement, and RBAC
• Leading SSO/SAML integrations for new SaaS platforms — configuring, testing, and documenting alongside the security team
• Owning access package governance and token management processes, ensuring alignment with policy and audit requirements
• Supporting licence governance: E3/E5 procurement, assignment, cost awareness, and flagging any out-of-policy requests to the appropriate stakeholder
AV/VC & Events Support
• Taking ownership of the AV/VC estate — maintaining full health of meeting room systems including display hardware, conferencing codecs, room controllers, and peripherals
• Proactive health monitoring using remote administration tools, with performance analytics and regular firmware/software updates
• Leading in-person and remote technical delivery for internal events and Executive/all-hands presentations
• Acting as the senior point of contact for AV issues, ensuring fast resolution and minimal meeting disruption across all sites
• Documenting AV configurations and building runbooks that enable the wider team to support the estate confidently
End User Computing & Device Management
• Advanced MacOS and Windows 11 management via JAMF Pro and Microsoft Intune/Autopilot — including policy authoring, troubleshooting complex deployment failures, and estate-wide configuration management
• Overseeing the quality of on/off-boarding processes: laptop builds, IT inductions, IAM compliance, deprovisioning, and asset retrieval
• Driving IT Asset Management maturity: inventory accuracy, lifecycle planning, hardware refresh adherence, and secure disposal compliance
• Working knowledge of Android and Linux environments; able to support edge cases confidently
Security, Compliance & Governance
• Championing security standards across the team — ensuring all activity aligns with ISO 27001, PCI-DSS, and internal policy
• Leading the team's contribution to audit and compliance reviews: ensuring evidence is well-organised, processes are followed, and findings are acted on
• Owning the leavers process for sensitive cases — coordinating deprovisioning, data access controls, and asset recovery in line with CISO and privacy requirements
• Supporting MFA rollout, access policy governance, and SSO governance initiatives with appropriate rigour and documentation
• Ensuring all advice given to the team is backed by security sign-off and documented reference — not informal Slack approvals
Documentation, Process & Continuous Improvement
• Owning and continuously improving the team's knowledge base — SOPs, runbooks, known error records, and onboarding guides must be accurate, accessible, and up to date
• Identifying process inefficiencies and owning their improvement: not just flagging them but designing, implementing, and embedding the fix
• Driving automation and tooling improvements — proposing and where possible implementing AI, ML, and scripting solutions that reduce toil and improve consistency
• Ensuring approvals, decisions, and audit trails live in the ticketing system — not in Slack channels
Our Tech Stack requires solid experience of 🔑
• Windows 11 and Apple ecosystem in an enterprise environment (+ working knowledge of Android & Linux)
• Mobile Device Management: JAMF Pro and Microsoft Intune — policy creation, complex troubleshooting, and deployment strategy
• Microsoft 365 administration — Exchange Online, Teams, SharePoint, OneDrive, and M365 Security & Compliance Centre
• Azure Active Directory — user lifecycle, Conditional Access, SSPR, MFA, and RBAC at an administrative level
• Modern workplace solutions: Autopilot, Intune, MFA, and cloud migration strategies
• Platform integrations, SSO/SAML — configuration, fault diagnosis, and documentation
• AV/VC hardware and software: room systems, conferencing platforms, and peripheral management
• Networks: TCP/IP, DNS, DHCP, LAN, WAN, and wireless
• Windows Command Line / PowerShell & Apple Scripting / BASH — beyond basics; able to write and adapt scripts
• SaaS applications including Slack, Atlassian suite, and cloud printing solutions
• ITSM platforms: lifecycle ticket management, SLA reporting, and queue ownership
• Security tools, best practices, PCI-DSS, and ISO 27001
• Runbook authoring and technical documentation to a high standard
Desirable Certifications:
• Microsoft 365 Certified: Endpoint Administrator Associate (MD-102)
• Microsoft 365 Certified: Administrator Expert or Security Administrator Associate
• Azure fundamentals
• Apple certifications for MacOS: ACSP (ACTC), JAMF 100
• CompTIA A+ or Network+
• ITIL Foundation v4 or V5
We'd love to hear from you if you... 🔍
• Take genuine ownership — you don't wait to be told, you see what needs doing and you do it
• Have the technical depth to anchor a team: complex problems don't rattle you, they motivate you
• Actively lift those around you — you share knowledge freely, coach patiently, and take pride in the team's performance, not just your own
• Communicate with clarity and confidence at all levels, from a junior engineer to an Executive stakeholder
• Conduct thorough, methodical investigations — you dig into logs, correlate patterns, and document what you find before reaching conclusions
• Have a genuine security-first mindset and understand why governance and audit trails matter
• Spot broken processes and own fixing them — not just flagging them
• Work autonomously under pressure, exercising sound judgement and knowing when to escalate
• Are happy to be onsite as needed, including for events and critical incidents
If you're a senior engineer who wants to do more than close tickets — who wants to shape a team, own a service, and leave things better than you found them — this is the role for you.
The Interview Process 🚉
• Recruiter Call
• Competency-based interview with 2x Engineers (45 mins)
• Panel interview with key Workplace Technology stakeholders (30 mins)
Additional Information
Enjoy fantastic perks like private healthcare & dental insurance, a generous work from abroad policy, 2-for-1 share purchase plans, extra festive time off, and excellent family-friendly benefits.
We prioritise career growth with clear career paths, transparent pay bands, personal learning budgets, and regular learning days. Jump on board and supercharge your career from day one!
Our values represent the things that matter most to us and what we live and breathe every day, in everything we do:
• 💭 Think Big — We're building the future of rail
• ✔️ Own It — We focus on every customer, partner and journey
• 🤝 Travel Together — We're one team
• ♻️ Do Good — We make a positive impact
Interested in finding out more about what it's like to work at Trainline? Check us out on LinkedIn, Instagram and Glassdoor.
Please note: This role requires 5 days a week in our London Farringdon Office.
More information:
Enjoy fantastic perks like private healthcare & dental insurance, a generous work from abroad policy, 2-for-1 share purchase plans, an EV Scheme to further reduce carbon emissions, extra festive time off, and excellent family-friendly benefits.
We're operating a hybrid model and ask that Trainliners work from the office a minimum of 60% of their time over a 12-week period. We also have a 28-day Work from Abroad policy.
Our values represent the things that matter most to us and what we live and breathe everyday, in everything we do:
We know that having a diverse team makes us better and helps us succeed. And we mean all forms of diversity - gender, ethnicity, sexuality, disability, nationality and diversity of thought. That's why we're committed to creating inclusive places to work, where everyone belongs and differences are valued and celebrated.
Interested in finding out more about what it's like to work at Trainline? Why not check us out on LinkedIn, Instagram and Glassdoor!
