What You'll Do
Take ownership of end-to-end IT operations for a distributed workforce, ensuring systems are secure, reliable, and scalable. You'll manage the full lifecycle of macOS devices—from provisioning and configuration to decommissioning—using modern management tools like Jamf. Implement and maintain robust identity and access controls across SaaS platforms through SAML, OIDC, and SCIM integrations, enabling seamless and secure user access.
Design and enforce Zero-Trust Network Access policies, with a focus on Cloudflare-based solutions, including posture validation and secure routing. Troubleshoot complex issues that span endpoints, identity providers, network layers, and cloud applications. Support distributed teams by deploying and maintaining networking infrastructure, including firewalls and AV/Zoom setups for remote and hybrid environments.
Automate repetitive workflows using APIs and scripting in Python or Bash to improve efficiency and reduce manual effort. Collaborate closely with Security and Infrastructure teams to harden endpoints, support monitoring initiatives, and respond to incidents. Maintain comprehensive documentation and audit-ready controls to support compliance with SOC 2 and PCI standards.
Requirements
- Minimum of 5 years in IT, internal infrastructure, or security roles within cloud-native or SaaS-focused organizations
- Extensive hands-on experience managing macOS and iOS devices at scale
- Proven track record administering identity providers with SAML, OIDC, and automated user lifecycle workflows
- Direct experience with core business SaaS platforms such as Google Workspace, Slack, and GitHub
- Familiarity with Zero-Trust access platforms, particularly Cloudflare
- Solid grasp of networking fundamentals: DNS, TLS, TCP/IP, and HTTP proxies
- Experience building scalable onboarding and offboarding systems in fast-growing environments
- Proficiency in scripting languages such as Python or Bash
- Ability to implement and maintain security policies aligned with organizational standards
- Strong communication skills, with the ability to explain technical concepts clearly to non-technical stakeholders
- Must be legally authorized to work in the United States and reside within the country
Benefits
- Employer-paid health insurance for employees and dependents
- 401(k) plan with company match
- Flexible paid time off
- Regular in-person company gatherings
- Home office allowance
- Additional perks available
Work Mode
This role supports hybrid work arrangements. Team members may work remotely or from offices in Austin, San Francisco, New York City, Seattle, Los Angeles, Chicago, Gurugram (Delhi), or Bengaluru. The Engineering team in India primarily operates from the Gurugram office. Flexibility is supported based on role and location.
