IT Systems Administrator

Immediate joiners only. This role is 100% remote. The client is in the US so candidate will be expected to work EST hours. Strict background checks will be conducted to prevent any possibility of moonlighting.

Role Overview

We are seeking an experienced

IT Systems Administrator

to serve as a high-autonomy execution partner within the IT organization. This role is designed for a versatile, hands-on administrator who can operate across the full breadth of an enterprise IT stack—with particular depth in device

management and identity platforms.

You will work in close coordination with the

Senior Client Platform Engineer (FTE) , who sets
technical direction and architectural priorities. Your focus will be translating that direction into
shipped work: configuring, maintaining, troubleshooting, automating, and documenting systems
across device management, identity and access management, SaaS administration, and IT
operations.

Key Responsibilities

Device Management & Fleet Operations

MDM administration:

Build, maintain, and troubleshoot policies, configuration profiles, Smart Groups, Extension Attributes, scripts, and packages within Jamf Pro across a macOS fleet.
Fleet remediation:

Investigate and resolve compliance drift, permissions issues, and configuration inconsistencies surfaced through monitoring, Smart Groups, or support escalations.
macOS lifecycle:

Support OS migration campaigns, enrollment workflows, device provisioning (DEP/ADE), and hardware lifecycle processes.
Scripting & automation:

Write production-quality bash/zsh/Python scripts for fleet operations, including Extension Attributes, remediation workflows, software deployment, and scheduled maintenance.
Endpoint visibility:

Contribute to endpoint query and observability tooling (e.g., FleetDM/osquery) as assigned.

Identity & Access Management

Okta administration:

Execute SSO/SAML/OIDC application integrations, SCIM provisioning, group and lifecycle policy management, and access reviews.
Directory services:

Support Google Workspace directory management, OU policy configuration, and admin console operations.
Access governance:

Assist with Device Trust, conditional access policy configuration, and endpoint compliance enforcement initiatives.

SaaS & General IT Administration

SaaS operations:

Administer and support business-critical SaaS applications, including user provisioning, configuration, license management, and vendor-side troubleshooting.
IT process execution:

Participate in change management, access request fulfillment, onboarding/offboarding automation, and operational runbook execution.
Security collaboration:

Support security-driven initiatives, including access audits, endpoint hardening, extension/plugin policy enforcement, incident response tasks, and remediation of security vulnerabilities (e.g., CVE-driven tickets) as assigned.

Operational & Cross-Functional

Backlog execution:

Work from a prioritized task board (Jira), providing regular status updates and proactively flagging blockers.
Documentation:

Produce clear runbooks, decision logs, and technical documentation for all completed work.
Async collaboration:

Coordinate with Security, Engineering, and IT peers via Slack and other

asynchronous channels, ensuring clear written handoffs across time zones.

Required Qualifications

7+ years of hands-on experience in IT systems administration, endpoint engineering, or a comparable infrastructure operations role.
Strong working knowledge of at least one enterprise MDM platform; direct Jamf Pro experience is strongly preferred and FleetDM second.
Experience administering Okta or a comparable enterprise identity provider, including SSO integrations, SCIM, and lifecycle management.
Proficiency in shell scripting (bash/zsh) for system automation;
Python experience is a strong plus.
Familiarity with macOS administration, including system internals, MDM protocol behavior, profiles, and security frameworks.
Demonstrated ability to work independently and manage multiple concurrent tasks with minimal oversight.
Excellent written communication skills, with comfort operating asynchronously via Slack and Jira across time zones.

Preferred Qualifications

Deep expertise in Jamf Pro: policies, profiles, Smart Groups, Extension Attributes, APIs(Classic + Pro), and package management.

Experience with Google Workspace admin console operations and directory management.

Experience with endpoint visibility platforms such as FleetDM, osquery, or similar tooling.
Familiarity with Zero Trust concepts, Device Trust, or certificate-based authentication workflows.
Comfort with Git-based workflows for script and configuration management, including branching strategies, pull requests, code review practices, and CI/CD workflows.
Background in SaaS-first, remote-first organizations.
Experience supporting developer-heavy environments and familiarity with developer tooling ecosystems.