IT Operations Engineer

AgentSync started in 2018 with one conviction: compliance shouldn't be this hard. It should enable it. We're a venture backed category-defining SaaS company headquartered in Denver. We've raised $161 million from investors including Craft Ventures, Valor Equity Partners, and Marc Benioff.

Our culture runs on four values: customer love, inspire excellence, always be curious, and act like an owner. That means no ego, no politics, and real ownership over your work. If you want to build something that matters for an industry that's ready for change, we'd love to talk.

As an IT Operations Engineer, you will own the identity, endpoint, and SaaS infrastructure that every AgentSync employee depends on to do their best work. You will help scale our IT Operations practice in a fast-moving startup environment — replacing manual, ticket-driven work with automation, standing up durable access and device management foundations, and defining the metrics that tell us whether IT is healthy. You’ll take projects from loose problem statements to production, partner closely with Engineering, Security, and the business, and set the standard for what great internal support looks like.

• Own and mature our identity provider (Okta) — SSO/SAML/OIDC integrations, SCIM provisioning, lifecycle management, and least-privilege RBAC across our SaaS estate
• Build the IAM and RBAC foundations that let us grow: consistent access models, automated joiner/mover/leaver workflows, and access reviews that hold up under audit
• Design and scale our macOS endpoint program in JAMF — zero-touch provisioning, patching, configuration profiles, and compliance baselines — with a clear roadmap toward MDM maturity
• Automate manual IT workflows with scripting and integrations so that onboarding, offboarding, and access requests are repeatable rather than tribal knowledge
• Define and report the KPIs that measure IT Operations effectiveness — response and resolution times, provisioning cycle time, patch and MDM compliance, and license utilization — and use them to drive investment decisions
• Lead IT projects end to end with loose or evolving requirements: frame the problem, plan the phases, sequence the work, communicate timelines, and deliver
• Prioritize a heavy queue of competing requests and incidents without losing the thread on long-term project work
• Partner with Security and Compliance to support SOC 2 evidence collection, access reviews, and audit readiness
• Troubleshoot escalated issues across identity, networking, endpoints, and SaaS applications — including the ones nobody has documented yet
• Support employees with genuine customer love, managing frustration with patience while getting to the real fix and preventing the repeat
• Administer and improve our ticketing and collaboration platforms so requests are routed, tracked, and measured rather than lost in DMs
• Regularly bridge the gap between IT and Engineering, Security, and business teams as a champion of cross-team collaboration
• Provision and manage employee hardware
• Participate in helping to build and maintain a culture of IT and engineering best practices

• Significant hands-on experience in IT Operations or IT Engineering, ideally at a startup or other high-growth, fast-changing environment
• Deep experience administering an identity provider and access permissions at scale (Okta strongly preferred), including SAML, SSO, OIDC, and automated provisioning
• Strong macOS fleet management experience with an MDM (Jamf preferred), and a clear point of view on what a mature MDM solution looks like and how to get there
• Working knowledge of AWS, including cloud identity and access management
• Solid Linux fundamentals and networking knowledge — comfortable reasoning through the OSI model when troubleshooting
• Scripting and automation experience (Python, Bash) paired with an automation-first mindset
• Familiarity with security and compliance frameworks (SOC 2) and how IT controls support them
• Experience administering ticketing and collaboration platforms and improving the workflows that run on them
• A track record of leading projects without being handed direction, and of executing from scratch in ambiguous situations
• Experience mentoring, leading, or otherwise growing the people around you
• The desire to work on a collaborative, learning oriented team
• Strong verbal and written communication skills, with the ability to explain identity, access, and endpoint concepts to non-technical audiences
• A scrappy, roll-up-your-sleeves mentality — you thrive with ambiguity and ownership

Location
Our ideal candidate will live within 25 miles of our office in Denver. Other states we're able to consider candidates in CA, CO, CT, GA, IL, IN, KS, MA, MD, MI, MN, MO, NC, NY, OR, TN, TX, UT, and WA. We are not hiring or able to consider candidates in New York metro, Seattle metro, or Bay Area.

Total Compensation

The following represents AgentSync’s reasonable estimate of the range of possible compensation for this role.

💰 $100K-$115K base salary

💲 Annual company bonus program

⚖️ Equity in the form of stock options

Health Benefits

🏥 Medical - Multiple Cigna plans to choose from, with up to 80% employer paid premiums for you and your dependents

🦷 Dental - Multiple Cigna plans with up to 80% employer paid premiums for you and your dependents

👁️ Vision - 80% paid premium plan for you and your dependents

📔 Employee Assistance Plan, Life & AD&D Insurance

Financial Benefits

🏦 401(k) retirement savings plan

🤒 HSA employer contributions

Other Benefits

🌴 Flexible PTO

📆 12 paid holidays per year

🍼 12 weeks parental leave w/generous return to work stipend

Candidates: AgentSync Recruiting & Talent teams will only communicate with you using @agentsync.io email addresses. When you receive communication from AgentSync, check the email address domain to ensure you're connected with our team (and not a scammer!).
We are not able to consider candidates who require a work visa now or in the future.

E-Verify: AgentSync participates in the federal E-Verify program. As required, we will verify the identity and employment eligibility of all newly hired employees through E-Verify.