VFX Financial PLC

Engineer

• Own Entra ID: architecture, user and group lifecycle, hybrid Active Directory integration, and directory governance
• Design, implement, and maintain Conditional Access policies enforcing Zero Trust access principles
• Manage Privileged Identity Management: just-in-time access, role activation workflows, and regular access reviews
• Work with our identity threat detection platform (CrowdStrike Falcon Identity Protection) to monitor for anomalies and respond to identity-based threats
• Manage external identities, B2B collaboration policies, and cross-tenant access settings
• Own periodic access reviews; ensure IAM controls remain current and evidenced for audit
• Own the full lifecycle of Windows and mobile device management via Microsoft Intune and Autopilot — provisioning, configuration, compliance, patching, and decommissioning
• Define and enforce device configuration profiles, security baselines, and compliance policies
• Monitor endpoint health and security posture; proactively identify and remediate vulnerabilities and configuration drift
• Develop and maintain PowerShell automation for identity lifecycle, compliance remediation, and operational self-healing
• Administer Exchange Online, SharePoint Online, and Microsoft Teams — security configuration, DLP policies, retention labels, and service health
• Support data protection requirements in collaboration with the DPO

M365 Engineer

QA Automation Engineer

• AI Adoption & Use-Case Delivery
• Work with business stakeholders across Operations, Finance, and Technology to identify, prioritise, and scope AI and automation use cases
• Maintain and manage the AI use-case register, including intake, prioritisation, status tracking, and outcomes measurement
• Drive adoption of deployed AI tools (Claude Enterprise and equivalents) — structured rollout, training, and usage measurement by function
• Stay current on enterprise LLM and AI tooling developments; advise the Data & AI Lead on relevant capabilities
• Automation Engineering
• Design and build production-grade automations using Power Automate, Python, and API integrations, targeting operational workflows across payments, FX, treasury, onboarding, and internal operations
• Build and maintain automated workflows and AI pipelines with human-in-the-loop controls, escalation paths, and audit trails
• Integrate LLM workflows with internal systems and third-party APIs using the Claude API or equivalent enterprise LLM APIs; Document all automations with clear operational runbooks; ensure solutions are maintainable by others
• Production Controls & Governance
• Apply production engineering standards to all AI deployments: secrets management, prompt and model versioning, evaluation datasets, output quality thresholds, and observability
• Implement cost monitoring and usage controls for LLM API consumption
• Build and maintain rollback and kill-switch mechanisms for all production AI workflows
• Apply personal data minimisation principles — no personal data in prompts unless explicitly reviewed and approved
• Produce the technical input for vendor, security, privacy, and data-residency assessments for any new AI tool or integration, working with the relevant control functions
• Operate within the AI governance framework; provide technical evidence and control documentation to Compliance, Risk, Security, and the DPO as required
• Maintain awareness of AI regulatory developments, including the EU AI Act timetable, and flag implications to the Data & AI Lead and Compliance
• SOP & Process Redesign
• Work with Operations to review existing SOPs and identify where automation can reduce manual effort, error risk, or processing time
• Where automation is not yet appropriate, document improved manual processes that are automation-ready
• Measure and report on automation impact — hours saved, error reduction, throughput improvements

M365 Engineer

AI & Automation Engineer