IT Operations Lead

This is a fully remote position, open to applicants in United States.

📋 Description

• Transform strategies and priorities into actionable projects and tasks; effectively sequence and assign work, conduct weekly planning, monitor status, eliminate obstacles, and communicate progress and risks to the CSTO.

• Establish daily priorities for IT personnel, evaluate changes, mentor team members, and create architecture documentation, runbooks, and change standards.

• Act as the final technical escalation point for incidents related to identity, endpoints, and SaaS; perform root cause analysis and implement permanent solutions.

• Execute platform and tooling decisions, including feasibility assessments, effort estimations, and vendor and licensing responsibilities.

• Oversee Entra ID architecture, including privileged access, Conditional Access, various authentication methods, passwordless and phishing-resistant MFA, PIM, admin role hygiene, break-glass accounts, and delegated administration.

• Manage identity lifecycle governance using Entra ID P2, encompassing access reviews, entitlement management, Identity Protection, and automated processes for joiners, movers, and leavers.

• Administer SSO and application integration across Entra and Auth0, focusing on app registrations, enterprise applications, SAML/OIDC federation, SCIM provisioning, Atlassian SSO and SCIM, and Entra SCIM groups.

• Oversee device identity, Entra join and registration, Platform SSO, Entra sign-in on macOS, Intune compliance, and Conditional Access integration.

• Regulate access patterns for guests, contractors, agencies, vendors, and other external parties within Entra and Microsoft 365.

• Maintain the access role matrix, pre-approved access bundles, and approval matrices.

• Implement and document IT technical controls for CMMC Level 2.

• Assist with SOC 2 Type 2 and policy governance, including access-control remediation, periodic access and firewall reviews, policy accuracy validations, and vendor intake assessments.

• Address security findings on corporate web properties and infrastructure.

• Collaborate with Security on identity threat detection, log monitoring, risk policies, identity incidents, KQL dashboards and detections, audit-log requests, and compliance reporting.

• Manage architecture, configuration baselines, compliance policies, and security policies for Intune, Jamf, and Datto RMM, as well as integration standards for Microsoft 365, Google Workspace, Slack, and Zoom.

• Administer Jira, Jira Service Management, Confluence, IT service workflows, and Power Automate processes.

• Oversee the administration and governance of AI tools, including Claude, Claude Code, Cursor, connectors, and MCP servers.

• Lead IT-related business-system integrations and enterprise application provisioning.

• Define access-request, approval, and granting processes for AWS, Azure, VPN, Cloudflare, log search, and deployment tools in collaboration with SRE and Security.

• Manage relationships with corporate network and office infrastructure vendors, including renewals, inventory management, and renewal schedules.

• Serve as the company’s subject-matter expert on Microsoft technologies, including Entra ID, Microsoft 365, Intune, Defender, and Azure fundamentals.

• Support Mac and Windows labs, integration lab, VDI environments, test tenants, dogfooding setups, and engineering onboarding processes.

• Maintain installer guides, scripts, and Datto RMM ComStore components for Unified Agent deployment and provide escalation assistance.

• Develop and sustain auditable automation using Microsoft Graph, PowerShell, Power Automate, and Python for provisioning, offboarding, licensing, group governance, and reporting.

⛳️ Requirements

• 7 to 10+ years of experience in systems engineering, identity engineering, or senior IT infrastructure roles.

• Minimum of 4 years of extensive, hands-on experience with Microsoft Entra ID in a production environment.

• Expert-level proficiency with Conditional Access, PIM, authentication methods, app registrations and enterprise applications, and SAML/OIDC federation.

• Practical experience with Entra ID P2 features: Identity Protection, access reviews, and entitlement management.

• Strong automation capabilities using Microsoft Graph API and PowerShell; familiarity with Python or Bash is a plus.

• Working knowledge of KQL and analysis of sign-in and audit logs.

• Comprehensive expertise in the Microsoft platform, including administration of Microsoft 365, Defender, and Azure fundamentals.

• Experience in implementing and evidencing technical controls for CMMC Level 2, NIST 800-171 or 800-53, SOC 2, or ISO 27001.

• Proficiency in administering Jira, Jira Service Management, and Confluence, including the development of workflows with Power Automate or similar tools.

• Experience managing Intune at scale; familiarity with Jamf and macOS management is strongly preferred; experience with Datto RMM or other RMM platforms is a plus.

• Experience integrating SSO and identity providers beyond Entra, with a strong preference for Auth0 and SCIM-based provisioning.

• Proven history of planning, delivering projects, and driving cross-functional initiatives to successful completion.

• Established senior engineer with a strong, verifiable record of practical delivery.

• Informal leadership experience, such as mentoring, project leadership, or being the primary escalation point.

• Motivation to advance into management while remaining engaged with technical tasks.

• Excellent written communication and strong documentation skills.

• Possession of Microsoft SC-300, MS-102, AZ-500, or SC-200 certification; at least one is strongly preferred.

• Experience in a security vendor or MSP, or within a CMMC, FedRAMP, or federal-contracting environment.

• Experience with infrastructure-as-code or configuration-as-code for Entra and Intune is an advantage.

🏝️ Benefits

• Health Insurance

• Vision Insurance

• Dental Insurance

• Life Insurance

• Robust 401k plan

• Discretionary Time Off

• Other minor perks

• Equity participation available to employees globally