IT Engineer

• Own the employee technology experience end to end in a primarily Mac environment, fixing problems and eliminating the conditions that cause them. • Manage the full MacBook fleet: procurement, provisioning, inventory, hardware refresh, and decommissioning • Own MDM and zero-touch provisioning (Kandji/FleetDM, Apple Business Manager) so new devices configure automatically on first boot • Administer Okta and identity lifecycle: provisioning, MFA, SSO integrations, and Okta Workflows, plus secrets management (1Password/Infisical) • Administer the core SaaS stack (Google Workspace, Slack, Notion, Jira) and automate user lifecycle management via APIs, while tracking licenses and spend • Run seamless onboarding and offboarding: automated workflows that get new hires fully configured on day one and cleanly deprovision departing employees • Drive proactive reliability and automation: monitor device health and access patterns, build self-healing scripts, and treat recurring issues as engineering problems to solve permanently • Support compliance and documentation: maintain security baselines, build an AI-powered self-service knowledge base, and own IT runbooks and internal comms • Co-manage our secure network access tools (Cloudflare Access, iBoss) and network/firewall policy with your Infrastructure teammates
• 4–6 years of IT experience at a technology company, with a service-oriented mindset. You measure success by how unblocked your colleagues are. • Hands-on MDM experience managing a MacOS fleet (Kandji, FleetDM, or similar), including Apple Business Manager and zero-touch provisioning • Solid Okta administration: SSO, MFA, Lifecycle Management, and Workflows, plus SCIM provisioning across SaaS tools • Strong scripting and automation skills (Bash, Python, or similar) • Experience administering a secrets management platform (1Password, Infisical, or similar) and proficiency with the Google Workspace admin console, APIs, and Jira • Familiarity with secure network access platforms (Cloudflare Access, iBoss, or similar) and strong network troubleshooting skills (DNS, DHCP, VPN, Wi-Fi) • Experience running a ticketing system (Zendesk, Jira Service Management, or similar)