IT Engineer

IT Engineer

Responsibilities

• Own the employee technology experience end to end in a macOS environment, fixing problems and eliminating the conditions that cause them.

• Manage the full MacBook fleet: procurement, provisioning, inventory, hardware refresh, and decommissioning.

• Own MDM and zero-touch provisioning (Kandji/Fleet DM, Apple Business Manager) so new devices configure automatically on first boot.

• Administer Okta and identity lifecycle: provisioning, MFA, SSO integrations, and Okta Workflows, plus secrets management (1Password/Infisical).

• Administer the core SaaS stack (Google Workspace, Slack, Notion, Jira) and automate user lifecycle management via APIs, while tracking licenses and spend.

• Run seamless onboarding and offboarding: automated workflows that get new hires fully configured on day one and cleanly deprovision departing employees.

• Drive proactive reliability and automation: monitor device health and access patterns, build self-healing scripts, and treat recurring issues as engineering problems to solve permanently.

• Support compliance and documentation: maintain security baselines, build an AI-powered self-service knowledge base, and own IT runbooks and internal comms.

• Co-manage our secure network access tools (Cloudflare Access, iBoss) and network/firewall policy with your Infrastructure teammates.

Qualifications

• 4–6 years of IT experience at a technology company, with a service-oriented mindset. You measure success by how unblocked your colleagues are.

• Hands-on MDM experience managing a macOS fleet (Kandji, Fleet DM, or similar), including Apple Business Manager and zero-touch provisioning.

• Solid Okta administration: SSO, MFA, Lifecycle Management, and Workflows, plus SCIM provisioning across SaaS tools.

• Strong scripting and automation skills (Bash, Python, or similar).

• Experience administering a secrets management platform (1Password, Infisical, or similar) and proficiency with the Google Workspace admin console, APIs, and Jira.

• Familiarity with secure network access platforms (Cloudflare Access, iBoss, or similar) and strong network troubleshooting skills (DNS, DHCP, VPN, Wi-Fi).

• Experience running a ticketing system (Zendesk, Jira Service Management, or similar).