Role Description:

We are seeking an IT Engineer to join our IT Operations team. This role enables Unicorn Engineers to do their best work, with a focus on balancing the engineer experience with a strong company-wide Information Technology Security posture. You will carry broad ownership across endpoint management, identity and access lifecycle, SaaS administration, and compliance-aligned IT operations. You will take the lead on IT projects from scoping through execution, own key systems and processes end-to-end, and serve as a reliable escalation point for complex support issues. The ideal candidate has strong fundamentals across IT hardware fleet management, identity tooling, and SaaS operations, and can balance hands-on support work with process improvement and project delivery in a CMMC-regulated environment.

Responsibilities:

The listed responsibilities are not exhaustive and additional responsibilities may be assigned based on the evolving needs of the organization. We are seeking a dynamic individual who is able to adapt and take on new responsibilities as they arise.

Administer core IT systems including MDM (Jamf), Google Workspace, and identity/access management tooling, ensuring configurations align with NIST SP 800-171 and CMMC requirements
Lead IT projects from requirements through implementation, such as SaaS tool rollouts, onboarding/offboarding automation, and endpoint compliance initiatives
Provide Tier 2 and Tier 3 helpdesk support, serving as an escalation point for complex issues
Perform endpoint lifecycle, including imaging, configuration, policy enforcement, compliance reporting, and decommission
Administer SaaS application access and provisioning workflows, and access reviews
Onboard and offboard users by managing access through Google Admin Console and related identity tools, coordinating across People Ops, Security, and IT to ensure timely and compliant access changes
Technical implementation of security controls aligned with NIST SP 800-171, such as logging, SIEM integration, incident response capability, and endpoint configuration management
Collaborate with third-party vendors and internal stakeholders on SaaS tool rollouts, troubleshooting, renewals, and integrations
Create and maintain IT documentation, runbooks, and process improvements to improve operational consistency and reduce ticket volume

Minimum Experience and Qualifications:

4+ years in IT operations, systems administration, or IT engineering roles
Experience administering MDM platforms (Jamf preferred) including device enrollment, policy creation, and compliance reporting
Experience managing endpoints at scale in an enterprise environment
Experience with Google Admin Console or similar directory/identity management platforms, including user lifecycle management and security policy configuration
Demonstrated ability to lead IT projects from scoping through delivery with minimal oversight
Experience with SaaS administration and access provisioning workflows
Familiarity with change management processes and IT documentation practices
Experience with helpdesk or ticketing systems and structured troubleshooting methodology
Proven ability to demonstrate results in a remote, asynchronous environment
US citizenship required; must be eligible for CUI access

Preferred Experience and Qualifications:

Experience in a defense contractor or government IT environment, specifically in regard to DFARS 252.204-7012
Familiarity with NIST SP 800-171, CMMC 2.0, or NIST SP 800-53 compliance frameworks
Familiarity with SAML, SCIM, and OIDC in administering SSO and role/group-based access control
Experience with SaaS management platforms (e.g., 1Password SaaS Manager, or similar)
Experience with scripting or automation to support IT operations (Bash, Python, or similar)
Experience administering security permissions and configuration in GitHub
Exposure to SIEM platforms, endpoint security tooling, or security operations workflows.

Travel Expectations/Requirements: 5%-10%. This is a remote US-based position. Travel would consist of company retreats, team building events, and conference attendance.