AI Tech Support Engineer (UK)

About Nexus Black

Nexus Black is an AI-first business within IFS, built to move quickly, challenge traditional ways of working, and turn the potential of AI into real-world outcomes for enterprise customers. We build AI to solve hard problems for the industries that keep the world turning: up on power lines, down on factory floors, and out in the field.

Our products — Resolve (field service and predictive maintenance), Flow (production planning), Comply (regulatory compliance) and Reason (analytical reasoning) — are used by technicians and engineers who cannot afford a tool that doesn’t work first time. We pair 40 years of IFS industrial depth with the technical pace of a start-up, and we get results in weeks, not months.

We’re building a team of highly capable, high-ownership people who are comfortable operating across traditional boundaries. We care less about rigid job descriptions and more about people who can understand a problem, get hands-on, and own the outcome.

The Role

As an IT Support Engineer at Nexus Black, you ensure every engineer’s essential tools laptops, communication, development, and AI accounts are fully provisioned, secured, and ready to go before they start. You will own the identity infrastructure, manage the Microsoft 365 and SaaS estate, and handle endpoint support across a rapidly growing organization. The environment is built on Entra ID, supported by industry-leading SaaS tools and ongoing cross-tenant migrations.

This is not a traditional helpdesk role. You are the driving force behind automation, continuously building processes that reduce repetitive tasks. You’ll identify the right licence tiers, anticipate integration needs, and script migrations, never settling for manual steps where automation is possible.

What We’re Looking For

• AI-First Problem Solver: You instinctively reach for AI solutions—Claude Code, Graph API scripts, or automation—whenever you spot repetitive work.

• Automation-Minded Operator: You maximize efficiency, valuing hours saved by automation over tickets closed.

Responsibilities

Identity & Access

• Design and manage Microsoft Entra ID at tenant scale, including SSO (SAML/OIDC), MFA, Conditional Access, SCIM provisioning, and full lifecycle automation.

• Oversee cross-tenant identity mapping and B2B collaboration for acquired teams and partner organizations.

• Manage secrets and credential rotation in 1Password Business and Azure Key Vault.

• Routinely conduct access reviews and maintain audit logs.

Microsoft 365 & Collaboration

• Administer the M365 environment: Exchange Online, SharePoint, OneDrive, Teams.

• Lead cross-tenant migrations via Microsoft Migration Orchestrator and tools (ShareGate, AvePoint, BitTitan, Quest).

• Maintain Slack and Notion at the Business/Enterprise tier.

SaaS Administration

• Hold admin ownership of the SaaS estate: GitHub Enterprise, Figma Organization, HubSpot, Cursor, Claude Team/Enterprise, Coralogix, LangSmith, FullStory, Vanta, Vercel, Railway, Supabase, Clerk.

• Evaluate and understand licence tiers, ensuring SSO, SCIM, and logging capabilities are ready before procurement.

Endpoints & Devices

• Manage endpoint policy and MDM with Intune, Jamf, or Kandji (Mac).

• Oversee device procurement, imaging, and BYOD policy.

Automation & Scripting

• Develop PowerShell, Python, or TypeScript scripts to automate manual operations.

• Integrate with Microsoft Graph API and various vendor APIs (Slack, Notion, GitHub, Figma).

• Use Claude Code or equivalent tools to build migration scripts and internal automations as part of your standard workflow.

Apple Developer Account

• Manage Apple Developer and App Store Connect (enrolment, D-U-N-S, certificates, provisioning, TestFlight, custom app distribution).

What Else You Bring

• Strong negotiation skills for dealing with vendors and partners.

• Exceptional written communication—you can independently run a migration plan and keep everyone aligned without needing constant oversight.

Nice to Have (But Not Required on Day One)

• Experience with Azure (subscriptions, RBAC, billing) and AWS Organizations.

• Familiarity with VPN, firewall, and DNS in customer environments.

• Knowledge of ISO 27001 or SOC 2 controls and audit processes.

• Incident response basics.

If you’re ready to harness automation and AI to transform IT support, we’d love to meet you.