IT & Security Manager ○ Boulder

Great Sky is a technology startup based with a mission to rebuild AI from first principles. We are pursuing neuroscience-inspired hardware and algorithms that overcome the greatest challenges in scaling AI systems.

We're looking for a hands‑on IT & Security Expert to own our technology infrastructure from the ground up. You'll be our first dedicated IT hire — which means you'll do the work, shape how we do it, and build the systems and practices that will carry us through our next phase of growth.

You'll report to the CTO. You'll work directly with the team rather than in a silo, and the job is to make people's lives easier, not to gatekeep. This is an IC role today with room to grow in scope and seniority as we scale.

This is a full‑time role based in Palo Alto, CA or Boulder, CO, with travel as well as flexibility for some remote work.

IT Operations & Infrastructure

• Own and manage our full IT stack (computers, software, network, firewall, and office infrastructure across macOS, Linux, and Windows environments)

• Stand up a secure VPN; deploy MDM (device management and policy enforcement) and endpoint security (currently Crowd Strike Falcon) across the full device fleet; build toward zero‑trust architecture, asset inventory, centralized logging, and SIEM

• Manage hardware procurement, asset tracking, onboarding/offboarding, software license management, IT budget

• Manage IT and security vendor relationships — decide what to manage internally vs. outsource, evaluate new tools before they touch our systems, and hold vendors accountable to commitments

• Support on‑site rack‑mounted server hardware and bare‑metal Linux as we productize

• Own our AI usage and safety policies by defining practical protocols and policies that balance productivity with IP protection

Identity, Access & Secrets Management

• Stand up an identity platform (Active Directory, Entra ) with SSO, MFA, and role‑based access; connect our internal web infrastructure's login to it

• Implement secrets management (Vault, 1
  
  Password Teams, SSM) with key rotation and no credentials sitting in repos

• Implement a zero‑trust mesh or VPN (Tailscale, Wire Guard, Cloudflare Access) with identity‑gated SSH

• Own cloud security across AWS, GCP, and SLURM — IAM, VPC/network segmentation, controlled ingress/egress

• Maintain encrypted backups; build toward secure external access to our hardware as we productize

Compliance & Security

• Lead and own all compliance roadmaps and certification efforts (e.g., CMMC Level 2, SOC
  2) — oversee buildouts, ongoing compliance, documentation of policies and procedures, and coordination with external assessors and managed providers

• Build toward a real security program: zero‑trust architecture, asset inventory, centralized logging and SIEM, monitoring, and identity governance

• Own incident response, disaster recovery, and business continuity planning

• Maintain awareness of export control rules given our deep tech work and government contracts

• 5-8 years of IT and security experience, with direct experience building from scratch at a small technical company — not just running a mature setup

• Strong identity and access management experience: SSO, MFA, role‑based access, directory services

• Secure networking experience: VPN, zero‑trust, identity‑gated SSH, device management, endpoint security

• Cloud security across at least one major provider (AWS, GCP, or Azure): IAM, network segmentation, controlled ingress/egress

• Fluent across macOS, Linux, and Windows

• Infrastructure‑as‑code mindset — builds things documented and self‑serve

• Scripting and automation depth (Python, Bash, Terraform, or similar)

• Experience working directly with engineering, operations, and leadership to understand business needs and translate…