Job Opportunities API

People here stay because the work is meaningful, the culture is strong, and the problems are worth solving. Location: This role is remote, but will require going into our local facility occasionally for equipment support. Our Technology Stack Identity & Cloud: Google Workspace, AWS (IAM, EC2, S3, CloudWatch), SSO / SAML / SCIM Management & Security: NinjaOne, Arctic Wolf, Meraki (LAN/WAN, firewalls, VPN) Data & Apps: Snowflake, Looker, ClickUp, Shopify, REST APIs Automation: Python, PowerShell, Bash What you will be doing: Identity & Access Management - Own identity systems across Google Workspace, SSO, SAML, SCIM, and RBAC. - Manage the full user lifecycle including onboarding, access changes, and offboarding. - Design and enforce security policies including least-privilege, conditional access, and MFA. - Translate business access requirements from non-technical stakeholders into secure, scalable configurations. Endpoint Engineering - Own Windows and macOS endpoint management using NinjaOne as the central platform. - Enforce device compliance standards, hardening policies, and full lifecycle management from procurement through decommissioning. - Automate provisioning, patching, and software deployment through scripting and zero-touch enrollment. - Improve device visibility, health monitoring, and automated remediation workflows. - Design and maintain secure BYOD policies and conditional access controls. Automation & Scripting - Build automation using Python, PowerShell, and Bash to reduce manual work and standardize IT operations. - Design and maintain IT workflows, automations, permissions, and reporting across systems. - Identify and implement AI tools that reduce manual IT effort — from ticket triage and workflow generation to predictive monitoring. - Support internal teams in adopting AI tools effectively, safely, and at scale. - Create and maintain runbooks, standards, and step-by-step guides the team can use without asking for help. Cloud Infrastructure & Integrations - Support AWS services including IAM, EC2, S3, CloudWatch, networking, and access governance. - Manage SaaS integrations, API configurations, data flows, and system automations across internal tooling. - Support system releases through testing, documentation, and change management to minimize disruption. - Evaluate new tools and architecture changes to support scale, reliability, and operational quality. Security & Compliance - Partner with Arctic Wolf on alert triage, threat investigations, and security response workflows. - Apply security standards across firewalls, encryption, endpoints, and access controls. - Support SOC 2 and ISO 27001 readiness through strong governance and documentation practices. - Maintain audit-ready records of system changes, permissions, and configurations. Technical Escalation & Continuous Improvement - Advanced Escalation: Serve as the tier-3 escalation point for complex identity, cloud, endpoint, and integration issues. - Project Execution: Manage and support IT upgrades, system rollouts, and cross-functional technology projects. - Proactive Optimization: Identify tooling and process gaps early, recommending practical, high-value improvements. - Cross-Functional Communication: Translate complex technical findings and recommendations into clear language for non-technical partners. Requirements: - Background: 5+ years in IT support, with dedicated time in a Systems Administrator or IT Engineering role (preferably in a high-growth environment). - Education: Degree in Tech/Information Systems or equivalent practical experience. - Compliance: Familiarity with framework readiness (SOC 2, ISO 27001). - Certifications (Preferred): AWS SysOps Administrator or Google Workspace Administrator. - Identity & Cloud: Deep expertise in IAM (SSO, SAML, SCIM, RBAC), Google Workspace, and cloud-first environment design. - Automation & Scripting: Profic