Lead IT Specialist

We’re looking for a highly technical Lead IT Specialist to own and evolve our corporate IT systems/access and security at a senior level. This is not a “tickets all day” role — it’s a high technical role that still stays close to the planning and the execution. You’ll be responsible for building secure, configure, and well-governed systems or 3rd party integration across identity/access, endpoint management, device compliance, and core productivity platforms (Google Workspace and key SaaS). This person will be the technical owner for IT foundations that support SOC2/ISO readiness, secure access, reliable onboarding/offboarding, and device compliance across a growing organization.

Responsibilities

Participate and advise on the IT technical roadmap across identity, endpoint security, access governance, and core corporate systems; Partner with Security/Infra to ensure SOC 2 Type II and ISO 27001 controls are operational; Establish standards for device compliance, access management, and SaaS lifecycle; Drive adoption of scalable patterns: SSO-first, least privilege, automated lifecycle management, and measurable compliance; Govern IT equipment in company offices; Own Google Workspace administration end-to-end; Lead Identity & Access Management: SSO/SAML, SCIM provisioning, group-based access control, and app access patterns; Own device endpoint management at scale (Kandji/Intune, OS update compliance, encryption, malware protection, reporting); Build and maintain operational automation via BetterCloud/SaaS Manager workflows and scripted automation; Own core security hygiene within IT (account lifecycle, device inventory, audit evidence); Support vendor/tool governance; Partner with Infra/DevOps/Security; Work with HR/PeopleOps; Collaborate with Finance/Procurement; Create clear documentation/runbooks; Define “how we work” standards; Build a monthly operating rhythm

Requirements

7+ years in IT engineering / systems administration / corporate systems leadership (senior technical depth); Deep expertise in Google Workspace administration and security controls; Strong experience with SSO/SAML and SCIM (Okta or similar IdP), group-based access models, least-privilege design; Strong endpoint management experience: Kandji (Mac) and/or Intune (Windows), patching, encryption, AV, compliance reporting; Comfort operating in a compliance-driven environment (SOC2 / ISO), including evidence, audits, and operational controls; Strong documentation habits and a “make it repeatable” mindset; Calm, practical, senior ownership: can run the work, prioritize, push back, and build scalable patterns

Nice to have

BetterCloud or similar automation tooling experience; Vendor risk management inputs and software governance experience; Experience rolling out Okta/device trust policies or conditional access; Experience building IT dashboards and metrics (SLA, compliance, lifecycle time); Experience with auditing mechanisms and processes (SOC2, ISO 27001)

Benefits

Eligible to participate in various benefits plans