IT Operations Engineer

TL;

DR:
We’re looking for a hands‑on IT Operations Engineer to help build secure, scalable internal IT  ideal person is an operator‑builder. You should be comfortable running day‑to‑day operations, improving the systems that support them, and making internal IT easier, safer, and more reliable for a remote‑first company.

Cloudsmith is building the operating system for the modern software supply chain.

We run a global, fully managed, multi‑tenant SaaS platform that helps organizations, from startups to the Fortune 500, secure, govern, and distribute software artifacts at scale.

Worldwide, our customers use Cloudsmith as a critical infrastructure control plane for CI/CD, developer workflows, security controls, compliance, and software distribution, supporting 30+ formats and ecosystems across languages, containers, and operating systems.

We recently raised our Series C to accelerate Cloudsmith 2.0: deeper artifact intelligence, stronger policy and provenance, faster package‑aware delivery, and infrastructure built for engineering teams, as well as the modern AI‑driven software factory.

By developers, for developers: we care about craft, architecture, and enterprise scale.

As an IT Operations Engineer, reporting into Security, you’ll work closely with the IT Manager and share responsibility for internal IT operations with the Operations team.

You’ll help run and improve the systems that keep the company working: identity, access, devices, SaaS tools, collaboration platforms, procurement, provisioning, patching, support workflows, and audit evidence.

You should be able to resolve operational issues, automate repetitive work, improve service quality, and build secure‑by‑default IT processes that scale. You’ll also provide occasional hands‑on IT support, usually as backup, for escalations, or for event and onboarding cover.

Security matters here, but this is not a pure security role. Your job is to make corporate IT work well, safely, and predictably for a remote‑first Series C company.

• Manage and improve core corporate IT systems, including identity, device management, collaboration tooling, service desk workflows, and SaaS administration.

• Own and automate Joiner‑Mover‑Leaver processes across access, identity, devices, asset provisioning, and software licensing.

• Support secure endpoint management through MDM, encryption, patching, device posture, remote lock/wipe, and lifecycle controls in the Apple ecosystem.

• Maintain access controls, role‑based access models, access reviews, least‑privilege practices, and evidence trails.

• Support procurement, provisioning, asset tracking, hardware lifecycle, software lifecycle, licensing, renewals, and vendor coordination.

• Provide backup and escalation support for HQ/on‑site IT where needed, including onboarding, events, working sessions, device readiness, meeting‑room equipment, peripherals, stock readiness, and basic networking coordination.

• Build automation, self‑service workflows, runbooks, and knowledge base content that reduce manual support load.

• Support IT service delivery for a globally distributed, remote‑first workforce, including issue triage, escalation, root cause follow‑up, and service improvement.

• Contribute to IT disaster recovery, business continuity, and operational readiness planning with Security and Operations.

• Support technical control work and evidence collection for SOC 2, ISO 27001, EU CRA, and other related compliance frameworks.

• Track useful IT metrics such as request volume, SLA adherence, provisioning time, patch coverage, access reviews, self‑service adoption, and employee satisfaction.

• Around 2 to 3+ years of IT operations experience in a modern SaaS, technology, or remote‑first environment.

• Strong hands‑on experience with endpoint management, device lifecycle, MDM, patching, encryption, and secure device posture.

• Experience administering identity and access systems, SaaS tooling, collaboration platforms, service desk workflows, and access review processes.

• Practical understanding of Joiner‑Mover‑Leaver workflows, least privilege, role‑based access, audit evidence, vendor access, and…