About the role
Responsibilities Build a complete identity lifecycle (onboarding/offboarding) and manage access to 30+ systems Control MFA/SSO coverage and manage access via groups Manage endpoints including MDM, EDR, patch management, and hardware inventory Manage VPN users, keys, and session audits Maintain vendor registers, contracts, and monthly spend reports Collect evidence for SOC 2 and ISO 27001 audits and manage security policies Act as L1 responder for security incidents on workstations Requirements 4+ years of experience as a System Administrator or IT Ops in a product-based IT company Proficient in Google Workspace administration Experience with SaaS administration (Slack, Jira, Confluence, GitHub, Notion, Figma, Password Managers) Experience with MDM for macOS, Linux, and Windows Experience with EDR/Antivirus deployment and administration Experience with VPN user administration Understanding of information security principles (MFA, least privilege, separation of duties) English level B1 or higher Willingness to provide L1 incident response outside of working hours (with additional pay) Preferred Qualifications Experience with SOC 2 or ISO 27001 audit preparation Experience with SSO/SAML and SCIM provisioning Experience with Jamf, Kandji, Mosyle, or Microsoft Intune Experience with CrowdStrike, SentinelOne, or Microsoft Defender for Endpoint Scripting automation (Bash, Python, PowerShell, Google Apps Script, GAM) Experience with vendor management and AWS/GCP billing Certifications: CompTIA Security+, Google Workspace Administrator, Jamf Certified, or Microsoft Intune Benefits Opportunity to build corporate IT and security operations from scratch Participation in SOC 2 / ISO 27001 certification processes Clear growth path to IT & Security Operations Lead Remote-first format Regular performance reviews