IT and Security Generalist

This is a fully remote position, open to applicants in United States.

📋 Description

• Manage user identities in Okta, including administration of users, groups, applications, and device trust.

• Oversee the MacBook fleet via MDM, focusing on enrollment, configuration, compliance, and remote actions.

• Supervise and enhance automated onboarding and offboarding processes while addressing exceptions.

• Sustain and expand lifecycle management, monitoring, and reporting automation, incorporating GenAI-assisted triage.

• Track workflows, resolve failures, and phase out outdated automations.

• Collaborate with process-owning teams to create automation for manual company procedures.

• Address endpoint, cloud, and identity security alerts within established SLAs.

• Examine and document security incidents, escalating them per established protocols.

• Contribute to vulnerability management by evaluating findings, monitoring remediation efforts, and reporting on status.

• Engage in application security assessments of engineering modifications, integrations, and vendor interactions.

• Assess authentication, authorization, and data management practices.

• Assist engineering in establishing secure default configurations.

• Maintain automated audit evidence collection and investigate any gaps.

• Compile evidence samples for SOC 2 and HITRUST evaluations.

• Address workforce support requests that necessitate system access or judgment.

• Create and update documentation for end users.

⛳️ Requirements

• 4-5 years of experience in dynamic IT, security operations, or systems administration settings, or equivalent proven experience.

• Familiarity with identity systems (Okta or similar) and macOS administration.

• Basic scripting experience along with an understanding of fundamentals.

• Background in workflow automation tools, LLMs, and APIs, or a strong desire to learn.

• Understanding of security basics: authentication, least privilege, and logging.

• Proficient written communication skills, with the ability to clearly explain issues, decisions, and status updates.

• Capability to take ownership of tasks, monitor systems, and resolve issues.

• Ability to use judgment and communicate obstacles effectively.

• Exposure to HIPAA, SOC 2, or HITRUST environments (preferable).

• Experience with AWS or GCP administration (preferable).

• Familiarity with EDR, SIEM, or cloud security monitoring tools (preferable).

• Ongoing or completed security certification (preferable).

🏝️ Benefits

• Medical / Dental / Vision insurance.

• Flexible Spending Account.

• Health Savings Account with company match.

• Company-paid Short-Term Disability (STD) / Long-Term Disability (LTD), Accidental Death & Dismemberment (AD&D), and Life insurance.

• Paid Family Leave.

• 401K plan with company match.

• Paid Time Off.

• Eligibility for a 10% bonus.