Lead IT Specialist

We are seeking a highly technical Lead IT Specialist to own and evolve our corporate IT systems, access, and security at a senior level. This role involves building secure, configurable, and well-governed systems across identity/access, endpoint management, device compliance, and core productivity platforms (Google Workspace and key SaaS).

Strategy:

• Participate in and advise on the IT technical roadmap across identity, endpoint security, access governance, and core corporate systems.
• Partner with Security/Infra to ensure SOC 2 Type II and ISO 27001 controls are operational.
• Establish standards for device compliance, access management, and SaaS lifecycle.
• Drive adoption of scalable patterns: SSO-first, least privilege, automated lifecycle management, and measurable compliance.
• Govern IT equipment in company offices.

Technical/Execution:

• Own Google Workspace administration end-to-end.
• Lead Identity & Access Management: SSO/SAML, SCIM provisioning, group-based access control.
• Own device endpoint management at scale using Kandji/Iru (Mac) and Intune (Windows).
• Build and maintain operational automation using BetterCloud or SaaS Manager workflows.
• Own core “security hygiene” within IT: account lifecycle, joiner/mover/leaver processes, device inventory accuracy.
• Support vendor/tool governance: software inventory ownership and vendor classification.

Team/Collaboration:

• Partner with Infra/DevOps/Security to align on controls, identity design, and incident readiness.
• Work with HR/PeopleOps on onboarding/offboarding and policy rollout.
• Collaborate with Finance/Procurement on renewals, licensing discipline, and cost visibility.
• Create clear documentation/runbooks for IT operations.

Research/Best Practices:

• Define “how we work” standards: SLA tiers, escalation rules, evidence cadence.
• Reduce repeat incidents via automation, standardization, and root-cause improvements.
• Build a monthly operating rhythm: access reviews, device compliance review, vendor/tool audits.

What Success Looks Like:

• First 30 days: Meet key stakeholders, audit Google Workspace, groups, SSO apps, device inventory, and current policies. Identify quick wins.
• First 60 days: Stabilize operations, implement onboarding/offboarding workflow, and roll out baseline endpoint compliance reporting.
• First 90 days: Deliver measurable improvements, lock down SSO standards, formalize IT runbooks, and ensure SOC2/ISO readiness.

Requirements:

• 7+ years in IT engineering/systems administration/corporate systems leadership.
• Deep expertise in Google Workspace administration and security controls.
• Strong experience with SSO/SAML and SCIM.
• Strong endpoint management experience: Kandji (Mac) and/or Intune (Windows).
• Comfort operating in a compliance-driven environment (SOC2/ISO).

Nice to Have:

• BetterCloud or similar automation tooling experience.
• Vendor risk management inputs and software governance experience.
• Experience rolling out Okta/device trust policies.

How You Work:

• Driven by Impact.
• Strategic & Customer-Centric.
• Curious & Growth-Oriented.
• Collaborative & Resilient.
• Accountable & Honest.
• Emotionally Intelligent.

Compensation:

• Salary Range: $110,000 - 150,000 USD.
• Market-based & data-driven approach to compensation.