IT Engineer

In This Role You Will:

• Own the employee technology experience end to end in a primarily Mac environment, fixing problems and eliminating the conditions that cause them.

• Manage the full MacBook fleet: procurement, provisioning, inventory, hardware refresh, and decommissioning

• Own MDM and zero-touch provisioning (Kandji/FleetDM, Apple Business Manager) so new devices configure automatically on first boot

• Administer Okta and identity lifecycle: provisioning, MFA, SSO integrations, and Okta Workflows, plus secrets management (1Password/Infisical)

• Administer the core SaaS stack (Google Workspace, Slack, Notion, Jira) and automate user lifecycle management via APIs, while tracking licenses and spend

• Run seamless onboarding and offboarding: automated workflows that get new hires fully configured on day one and cleanly deprovision departing employees

• Drive proactive reliability and automation: monitor device health and access patterns, build self-healing scripts, and treat recurring issues as engineering problems to solve permanently

• Support compliance and documentation: maintain security baselines, build an AI-powered self-service knowledge base, and own IT runbooks and internal comms

• Co-manage our secure network access tools (Cloudflare Access, iBoss) and network/firewall policy with your Infrastructure teammates

Qualifications:

• 4–6 years of IT experience at a technology company, with a service-oriented mindset. You measure success by how unblocked your colleagues are.

• Hands-on MDM experience managing a MacOS fleet (Kandji, FleetDM, or similar), including Apple Business Manager and zero-touch provisioning

• Solid Okta administration: SSO, MFA, Lifecycle Management, and Workflows, plus SCIM provisioning across SaaS tools

• Strong scripting and automation skills (Bash, Python, or similar)

• Experience administering a secrets management platform (1Password, Infisical, or similar) and proficiency with the Google Workspace admin console, APIs, and Jira

• Familiarity with secure network access platforms (Cloudflare Access, iBoss, or similar) and strong network troubleshooting skills (DNS, DHCP, VPN, Wi-Fi)

• Experience running a ticketing system (Zendesk, Jira Service Management, or similar)