IT Operations Engineer

Required: 3-5 years in IT operations or systems administration, including at least 1-2 years at a startup or small, fast-moving team Hands-on admin experience with Okta or a similar SSO provider (Microsoft Entra ID, OneLogin, JumpCloud) Proven macOS fleet management with an MDM (Kandji, Mosyle, Jamf, Intune, or similar) Google Workspace administration Scripting ability (Python, Bash, or similar) and a habit of automating repeated tasks Clear written communication; you document as you goNice to have: Supported a SOC 2, HIPAA, or ISO 27001 audit, or used a compliance platform like Secureframe, Vanta, or DrataOkta Workflows or other no-code automation tools Linux familiarity and basic GCP or AWS IAMExperience supporting a remote team across time zones What this role is not: Not Windows administration: we run macOS and LinuxNot traditional enterprise networking: we're cloud-first with minimal on-prem infrastructure beyond our office hubs Identity and access: Administer Okta (or our SSO provider): app integrations, groups, provisioning and deprovisioning, and MFA policy Run access requests and periodic access reviews across Google Workspace, Slack, GitHub, GCP, and our other SaaS tools Devices: Own our macOS fleet through MDM: enrollment, configuration profiles, OS and app patching, and encryption Handle laptop procurement, shipping, inventory, and recovery for a distributed team across the US and Europe Employee lifecycle and support: Own onboarding and offboarding end to end, so new hires are productive on day one and departures are fully closed out the same day Be the go-to person for hardware, software, and account issues, and turn recurring questions into docs or self-serve fixes Support office IT (Wi-Fi, conference rooms, printers) at our New York and San Francisco hubs Automation: Script and automate repetitive IT work (for example, onboarding workflows, provisioning, and device compliance checks) using tools like Python, shell scripts, Okta Workflows, or HRIS integrations Keep IT procedures, runbooks, and the asset inventory current SaaS and vendors: Manage the SaaS stack: licenses, renewals, spend, and removing unused seats Evaluate new tools and vendors with the Security & Automation Engineer Security and compliance support: Keep IT controls healthy day to day (device compliance, access reviews, offboarding checks) and follow up on exceptions Collect and organize audit evidence for SOC 2 Type 2, HIPAA, and future frameworks Help roll out security awareness training and phishing simulations