Senior IT Engineer

About Nue.io

Nue.io is a next-generation CPQ and revenue automation platform designed for modern SaaS and subscription-based businesses. Our mission is simple: empower go-to-market teams to move faster, close smarter, and scale with confidence. With an elegant, no-code interface and deep Salesforce integration, we streamline the entire quote-to-revenue journey — from complex pricing and approvals to seamless renewals. Backed by top-tier investors and trusted by forward-thinking companies, Nue.io

is redefining revenue operations for a product-led world.

But we’re more than our product — we’re a team built on curiosity, trust, ownership, and a genuine passion for building great things together. We foster a culture where people can do their best work, grow quickly, and make a real impact. And we’re growing! If you're excited by big challenges, smart teammates, and a high-velocity environment, we’d love to meet you.

We’re looking for a Senior IT Engineer to help build and scale corporate IT at Nue IO.

In this role, you will own day‑to‑day implementation and continuous improvement of core IT architecture
, security‑aligned processes
, and the SaaS/identity ecosystem that keeps a distributed, product‑focused SaaS company running securely and efficiently.

You’ll act as a technical and operational lead for end‑user devices, identity and access, SaaS application management, and IT security controls, partnering closely with Engineering and Dev Services.

You’ll also mentor other IT team members and contribute to the roadmap for IT and security maturity (e.g., SOC 2, SOC 1, ISO‑aligned practices), in alignment with IT leadership.

This role reports to the Director, IT
.

• Implement and maintain standard patterns for user lifecycle, access control, and device posture that align with security and compliance requirements, in partnership with the Director, IT.
• Contribute hands‑on input to the design and continuous improvement of IT architecture for corporate endpoints, identity, and SaaS applications.

• Design and maintain hardened baseline configurations for Mac endpoints, including MDM/EDR policies, patching, and disk encryption.
• Ensure accurate, auditable asset inventories for laptops, networking gear, and key IT‑managed services.
• Establish and optimize tooling and automation for device provisioning, configuration drift detection, and secure offboarding.

• Lead day‑to‑day identity and access management (IAM) across Google Workspace, HRIS/SSO, Salesforce, Slack, Atlassian, and other core apps.
• Implement and drive RBAC and least‑privilege models, including role profiles by function and regular access reviews, in partnership with IT leadership.
• Partner with functional owners on SaaS vendor onboarding, risk reviews, renewals, and entitlement rationalization.
• Design and refine automated workflows (e.g., via HRIS/IdP/IT tooling) for joiner/mover/leaver processes.

• Act as a primary IT owner for controls related to:
  • Endpoint security (MDM/EDR, patching, disk encryption, USB/removable media policies).
  • Identity security (MFA enforcement, SSO, conditional access, OAuth governance).
  • Corporate SaaS hardening (admin roles, audit logs, configuration baselines).
• Execute against the IT compliance framework defined by IT leadership, helping to maintain controls and documentation needed for SOC 2 / SOC 1 / privacy and related frameworks.
• Collaborate with auditors and internal stakeholders to provide evidence, help identify and close gaps, and support readiness for security and compliance audits and assessments.
• Help drive vulnerability management remediation across endpoints and IT‑managed services; prioritize and track remediation in partnership with Dev Services and Engineering.
• Participate in incident response for account compromise, device loss, suspicious activity, or vendor breaches, including root cause analysis and follow‑up improvements.
• Support responses to customer questionnaires around security and compliance of our products, in partnership with IT leadership.
• Maintain an awareness of…