The posting
Together Group brings together around 15 creative and consulting agencies, comprising roughly 650 people across the UK, Europe, the US and Asia. Each agency retains its creative and operational autonomy, but they now share a newly formed central IT function, and you would be one of its first hires.
That function is being built from the ground up: no shared identity platform, no common security baseline, no standardised device management, and roughly 50 overlapping SaaS products spread across the Group. Our mandate is to standardise technology, raise the security baseline and reduce cost, all while supporting the exceptional work our agencies are known for.
Purpose of the role
You are the front line of the new shared service: the first point of contact for day-to-day IT issues as each agency onboards, and the hands-on delivery partner for the device, identity and migration programme that follows. It is a support role with an unusual amount of build attached to it, and because the shared service is being designed now, the role is expected to widen rather than settle.
Key Responsibilities
- Own and manage the front-line support queue across all onboarded agencies (tickets, calls and walk-ups).
- Provision and enrol hardware via zero-touch deployment tooling as agencies join the shared service.
- Administer user lifecycle and access controls across Google Workspace and Microsoft 365 (joiners, movers, leavers), ensuring prompt off-boarding to eliminate unnecessary licensing costs.
- Provide 1st and 2nd line support for core productivity platforms, creative tooling and agency business applications.
- Help administer the Group’s SaaS estate of roughly 50 applications across a dozen vendor consoles, reclaiming licences at leaver stage and flagging duplication and under-use ahead of renewals.
- Support endpoint security agent deployment (EDR) and triage first-line security alerts across managed devices.
- Maintain and track the Group’s central hardware, software and IT asset inventory.
- Assist the Group IT Manager with hands-on agency migrations, identity consolidation and cutover execution.
- Document resolution paths, user guidance and standard operating procedures to build out the team’s central knowledge base.
- Travel as required to agency sites (primarily UK, occasionally Europe) for on-site onboarding, migrations and support.
How the role grows
This is deliberately not a capped helpdesk role. The shared service is being built now, and the people who build it have first claim on what it becomes.
- Administrator-level access from the start. You will hold genuine admin rights across Google Workspace, Microsoft 365 and the device management platforms, not delegated helpdesk permissions gated behind someone else’s approval.
- MDM administration. As the Group consolidates onto a standard device management platform, there is scope to take on its day-to-day administration: enrolment profiles, configuration policy, application deployment and patching.
- Into systems administration. Identity, endpoint, security tooling and automation sit immediately alongside this role, and the intention is that you take ownership of pieces of it as the estate stabilises.
- Leading people. The team aims to include apprentices and will grow as more agencies onboard. There is a realistic route from mentoring into running first-line support for the Group.
Skills and Experience
What we're looking for
Essential
- Prior 1st or 2nd line IT support experience in a business environment.
- Hands-on administration of Google Workspace and/or Microsoft 365 — accounts, groups, licence assignment, access and mailbox basics.
- Confident supporting both macOS and Windows users.
- Comfortable working across many different setups; this estate is inconsistent by nature and will be for a while.
- Appetite to grow beyond front-line support — this role is designed to expand, and we want someone who wants that.
- Clear, patient communication with non-technical and creative users, and the judgement to know when to escalate.
- Willingness to travel occasionally and to cover the occasional out-of-hours cutover.
Desirable
- MDM or zero-touch deployment tooling — Jamf, Mosyle, Intune, NinjaOne or similar.
- Endpoint security tooling — Microsoft Defender, Malwarebytes or another EDR product.
- Single sign-on and identity platforms such as Okta or Microsoft Entra ID.
- Any scripting or automation — PowerShell, Google Apps Script, bash — however informal.
- Supporting creative teams and their software (Adobe Admin Console, Autodesk, Figma), and users across multiple time zones.
- ITIL Foundation or equivalent; agency, media or professional services background; full UK driving licence.
What you'll get
- A genuine build-from-scratch mandate. You’ll shape the Group’s IT standards, not inherit someone else’s.
- Breadth most support roles never offer: around 15 businesses, a wide technology estate, and hands-on exposure to identity, endpoint, security and SaaS management.
- Pension, standard Group holiday allowance and other core benefits (details on application).
