Cloud Systems Administrator

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee the daily management of OneImaging’s SaaS and cloud vendor ecosystem, with a focus on security and logging.

• Manage tenant configurations, including SSO/SAML, SCIM, MFA, API keys, roles, and permissions.

• Set up and maintain audit logging, centralizing logs wherever feasible, while ensuring retention aligns with compliance requirements.

• Perform access audits, deactivate inactive accounts and excess privilege roles, and keep inventories of admin rights updated.

• Assess vendor security configurations, monitor security alerts, and analyze vendor requests for potential risks.

• Facilitate the onboarding and offboarding processes for employees and contractors across systems using Rippling and Google Workspace.

• Oversee group management, role assignments, license distribution, device enrollment, MDM policies, and endpoint security.

• Develop automation scripts in Python, PowerShell, or Bash, and utilize vendor APIs for provisioning, access audits, log collection, and reporting.

• Create integrations among HRIS, identity providers, and various SaaS platforms.

• Manage and respond to security alerts, gather log evidence, escalate incidents, participate in post-incident assessments, and implement corrective measures.

• Maintain and evaluate incident response and business continuity documentation.

• Provide tier 1–2 IT support for employees regarding hardware, accounts, access, video conferencing, printers, and office networks.

• Procure, configure, and oversee laptops and peripherals while maintaining asset inventories.

• Develop internal how-to guides to promote self-service.

• Administer the organization’s platforms including AWS, Rippling, Google Workspace, Zendesk, Salesforce, Intercom, Zoom, Aircall, Twilio, Databricks, MongoDB Atlas, Sentry, Linear, Postman, Stytch, Anthropic, OpenAI, and other specified tools.

⛳️ Requirements

• Minimum of 3 years of experience in managing SaaS and cloud platforms within a company of 50–500 employees, including Google Workspace and an identity/HR platform like Rippling or Okta, preferably with AWS experience.

• Practical experience in configuring SSO/SAML, SCIM provisioning, MFA policies, and role-based access control.

• Proficient understanding of audit logging and log analysis, including CloudTrail, Workspace audit logs, or Zendesk audit records.

• Ability to script in at least one of Python, PowerShell, or Bash, and familiarity with calling REST APIs.

• Experience in responding to security incidents such as phishing attacks, compromised accounts, and lost devices, along with documenting these events.

• Strong instincts for IT support and the ability to communicate effectively with non-technical colleagues while resolving issues promptly.

• Understanding of HIPAA or a similar compliance framework like SOC 2 or ISO 27001, particularly regarding access control and logging implications.

• Preferred: AWS Certified SysOps Administrator, Security Specialty, or Google Workspace Administrator certification.

• Preferred: Experience with SIEM or log aggregation tools and the ability to write detection rules.

• Preferred: MDM experience and expertise in macOS/Windows endpoint hardening.

• Preferred: Knowledge of Terraform or other infrastructure-as-code solutions.

• Preferred: Previous experience in healthcare or another regulated industry.

• Preferred: Background in managing API usage and keys for Anthropic or OpenAI, including spend and access management.

🏝️ Benefits

• Eligibility for an equity incentive plan.

• Comprehensive benefits packages.