IT Systems Engineer

Final date to receive applications: 27 November 2026

Department: Engineering

Employment Type: Full Time

Location: Denver

Compensation: $120,000 - $150,000 / year

TL;

DR Kharon is seeking a full-time IT System Engineer based in Denver. This role requires in-office attendance at least 3 days a week.

• Provide day-to-day support for staff and white glove support for C-Suite on macOS and Windows devices, both in the Denver office and remotely for staff across our globally distributed workforce.
• Administer Jamf for macOS and Intune for Windows, including enrollment, configuration profiles, app deployment, patching, and asset inventory.
• Manage Okta as the identity provider for our tech stack including, but not limited to, Atlassian (Jira and Confluence), Slack, 1
  
  Password, and other SaaS applications, and administer Tailscale for secure network access.
• Build and maintain automated onboarding and offboarding using Okta Workflows, SCIM provisioning, and scripting, so accounts, access, and devices follow each employee's lifecycle with minimal manual steps.
• Administer Cisco Meraki and Uni Fi hardware across office locations, and troubleshoot LAN, Wi-Fi, VPN, DNS, and DHCP issues.
• Maintain disk encryption, patch compliance, EDR coverage, and device compliance policies in Jamf and Intune.
• Run periodic access reviews, enforce least-privilege access and 1
  
  Password vault governance, and collect and maintain evidence for security audits such as SOC 2 or ISO 27001.
• Serve as the on-site IT presence in our Denver headquarters, supporting the executive team and office systems including conference room AV and Wi-Fi, with occasional travel to support other offices.
• Deliver IT projects in partnership with the IT Lead, document processes in Confluence, and train employees on IT best practices.

• At least 5 years of experience in IT support or systems administration, ideally in a multi-office or distributed company.
• Strong macOS administration experience with Jamf, plus working knowledge of Windows device management with Intune.
• Hands-on administration experience with Okta, Google Workspace, Atlassian (Jira and Confluence), Slack, and 1
  
  Password.
• Experience with Tailscale or a similar zero-trust network access tool.
• Solid understanding of networking concepts (TCP/IP, VLANs, DNS, DHCP, Wi-Fi, firewalls, VPN) and experience administering Cisco Meraki and Uni Fi hardware.
• Scripting experience in Bash/zsh, Python, or Apps Script , with a track record of automating IT workflows.
• Strong understanding of how to use AI tools to speed up scripting, documentation, and support workflows.
• Experience supporting remote employees across time zones.
• Experience running cable and setting up conference room AV and video conferencing equipment.
• Familiarity with endpoint security, access reviews, and supporting security audits.
• Jamf Certified Tech (Jamf 200) or Okta Certified Administrator certification preferred.
• Experience with Okta Workflows, HRIS integrations, or Jira Service Management automation.
• Experience building and refining IAM governance
• Awareness of GDPR as it applies to employee devices and accounts in EU offices preferred.
• Excellent communication skills and the ability to explain technical topics clearly to colleagues of all technical backgrounds.

Kharon is a highly disruptive and incredibly innovative organization that navigates risk at the intersection of global security threats + international commerce.

What does that mean? Great question.

Operating at the nexus of global security, Kharon is on a mission to revolutionize the current landscape. We take really complex data as it relates to global security and empower our clients to not only understand the risk associated with…