IT Systems Administrator

This is a fully remote position, open to applicants in United States.

📋 Description

• Manage corporate identity and access across Google Workspace and essential business applications, including user accounts, groups, roles, and least-privilege permissions.

• Enhance the identity infrastructure through single sign-on, lifecycle automation, and identity management tools.

• Oversee the user lifecycle from onboarding provisioning to role changes and exit deprovisioning.

• Conduct regular user access reviews and ensure that remediation actions are completed.

• Implement authentication and device standards, including MFA enrollment, encryption, patch management, and configuration baselines.

• Handle device provisioning, MDM enrollment, laptop configurations, and zero-touch deployment.

• Generate and sustain IT control evidence to assist with audits, customer security inquiries, and vendor security assessments.

• Keep inventories of applications, hardware assets, and related access updated.

• Provide daily IT support for staff members.

• Define and document IT processes while maintaining up-to-date runbooks.

• Collaborate with infrastructure and people operations on policy implementation, completion of security-awareness training, and incident response for IT-managed systems.

• Ensure that Epic's IT operations are always ready for audits.

⛳️ Requirements

• A minimum of 5 years in IT administration or IT operations, with practical experience in identity, endpoint, and business application management beyond basic ticket support.

• Proven experience in supporting a formal compliance program (SOC 2, ISO 27001, or equivalent), including conducting access reviews, evidence collection, and collaborating with auditors.

• Proficient understanding of identity and access management, including single sign-on, multi-factor authentication, and user lifecycle management.

• Experience in administering Google Workspace or a similar productivity and identity suite.

• Strong troubleshooting skills across hardware, operating systems, networking, and SaaS applications.

• Excellent communication and documentation skills, effectively supporting both technical and non-technical staff.

• Bachelor's degree or equivalent practical experience is required.

• Preferred: Experience managing a macOS fleet using a modern MDM platform (Jamf, Kandji, Intune, or similar).

• Preferred: Experience with implementing conditional/context-aware access.

• Preferred: Knowledge of COPPA, FERPA, and GDPR.

• Preferred: Experience with compliance automation platforms like Vanta, Drata, or similar.

• Preferred: Familiarity with identity governance/access review tools such as SailPoint, Certalign, Lumos, or similar.

• Preferred: Experience with SAML and SCIM SSO integrations.

• Preferred: Scripting experience in Python, Bash, or PowerShell.

🏝️ Benefits

• Fully remote work arrangement.

• Collaborative global team environment.