IT Manager

• We are seeking an IT Manager to own day-to-day IT operations, user lifecycle management (onboarding/offboarding), and identity & access management (IAM) for our growing, distributed team
• This is a hands-on, one-person IT and security function
• For now, you will be the sole technical resource and the primary point of contact for all IT and security matters, owning the processes end-to-end
• As the function grows, there is the opportunity to build and lead a team beneath you
• You will report directly to the CISO and serve as their key operational partner on access and security matters
• This role goes beyond execution; you’ll set the standards, own the processes end-to-end, and serve as the primary technical escalation point
• You’ll be provisioning and deprovisioning accounts, managing devices through Intune, driving IAM strategy, managing endpoint security, and making sure the right people have the right access at the right time
• The ideal candidate is senior enough to operate independently from day one with no ramp-up required
• You’ve operated as the sole or senior IT resource at a startup, are comfortable wearing every hat, owning ambiguous problems independently, documenting your work, and balancing reactive support with proactive process improvement
• Serve as the primary point of contact and escalation lead for Tier 1-3 technical support requests via ticketing systems
• Support end users across both Windows and macOS environments, including hardware, OS, and application issues
• Troubleshoot connectivity, printing, email, and general software/access issues
• Triage and resolve tickets within defined SLAs, owning escalation paths for complex issues
• Own documentation standards: maintain clear records of common issues, fixes, and internal how-to guides
• User Lifecycle Management & IAM
• Own end-to-end onboarding/offboarding: training for new hires on company systems, account provisioning, device setup, and access control for new hires and departing employees
• Own identity and access management (IAM) strategy, including periodic user access reviews, role/permission assignment, and timely deprovisioning
• Apply and enforce least-privilege principles when granting or reviewing access to systems and applications
• Support SSO configuration and troubleshoot SaaS application access issues
• Maintain accurate records of who has access to what
• Administer Microsoft Intune (MDM) and O365 for a remote, multi-OS device fleet
• Set and enforce security policies across endpoints, including encryption, patching, and compliance configurations
• Deploy, monitor, and manage Microsoft Defender across managed devices
• Own patch management across the fleet
• Handle physical logistics for company devices, including shipping/receiving equipment for new hires, offboarding, and repairs
• Own device inventory tracking and lifecycle management of company hardware, including procurement recommendations
• Manage Google Workspace users, groups, and settings
• Maintain and troubleshoot core SaaS tools used across the organization
• Apply strong security fundamentals across endpoints, identity, and access, including encryption, patching, MFA/conditional access, and least-privilege enforcement
• Partner with the CISO on access-related security requests and remediation items
• Serve as the operational owner of endpoint and identity security
• What Success Looks Like
• New hires are fully onboarded and productive on day one, with no access gaps or delays
• Offboarding is complete and access is revoked promptly, with no orphaned accounts left behind
• IAM access reviews run on a schedule you’ve defined and refined, with clean documentation
• Tickets are resolved consistently within SLA, with a track record of clear communication
• Endpoints remain compliant, patched, and properly enrolled in Intune
• Microsoft Defender and patch management are actively monitored and maintained across the fleet
• IT processes and documentation are mature enough that they could scale to a growing team

Strong written and verbal communication skills, with the ability to explain technical issues to non-technical staff and represent IT to leadership

Willingness to ship, receive, and temporarily store company equipment (e.g., laptops) at their home as part of device lifecycle logistics

Hands-on experience with Microsoft Defender and endpoint security, patch management, Microsoft Intune, Google Workspace administration

Customer service orientation with the ability to remain patient, empathetic, and reassuring when supporting the team7+ years of IT support/operations…