IT and Data Security Specialist

IT Specialist / Data Security Specialist

Location: 100% Remote (Indonesia/Romania/India)
Role Type: Full-time

We are looking for an IT Specialist / Data Security Specialist to join our high-impact engineering team, which is focused on the US market. This is a senior, hands-on role, not a helpdesk position. You will own IT, security, and access management for the company, operate with independent judgment, and proactively improve systems rather than react to issues.

• Run the full user lifecycle (onboarding and offboarding) across core SaaS platforms, cloud environments, code repositories, VPN, the password manager, and AI tools, using a documented checklist and audit trail.
• Set up and maintain macOS, Linux, and Windows devices remotely.
• Manage MDM/UEM and endpoint security for all devices that access company data, including full-disk encryption.
• Manage VPN and network access controls.
• Manage AWS/GCP IAM, Security Groups, firewall rules, and access reviews.
• Manage secrets, API keys, and tokens (storage, rotation, and revocation).
• Review cloud storage (e.g., S3) for public exposure and enforce data retention policies.
• Govern access to AI/LLM tools and the data sent to them, including PII redaction.
• Own vulnerability and dependency management in partnership with engineering.
• Manage DNS and Cloudflare (records, proxying, WAF).
• Plan and run security audits and drive remediation.
• Lead response to access and security incidents (credential leaks, data exposure, compromised accounts).
• Design secure, restricted work environments for teams that handle sensitive data.
• Run phishing and social-engineering awareness training.
• Own SOPs, runbooks, and KB articles.
• Maintain audit trails and data access governance.
• Complete client and vendor security questionnaires and maintain the supporting evidence.

• 4+ years in an IT Specialist or similar role supporting a distributed team.
• Hands-on
  macOS
  , Linux
  , and Windows
  .
• Least privilege,
  MFA enforcement
  , and endpoint hardening.
• Secrets and credential management (password managers, API keys, rotation).
• AWS and/or GCP IAM and access control
  .
• DNS and Cloudflare
  .
• Security audits with actionable remediation plans.
• User lifecycle management across SaaS platforms.
• VPN setup and management.
• Strong documentation skills, including guides that non-technical teammates can follow.
• Strong written English and comfort working asynchronously across time zones.
• Sound judgment and discretion when handling privileged access and sensitive data.
• Should be comfortable working with US Overlapping hours

• MDM/UEM (Jump Cloud, Jamf, Intune).
• Zero-trust tools (Tailscale, Cloudflare Access).
• SSO/IdP (Okta, Google Workspace, Entra ).
• Scripting (Bash, Python, Power Shell).
• Vulnerability scanning tools (Nessus, Qualys).
• Terraform or Cloud Formation.
• SOC 2/ISO 27001 exposure.
• Experience completing client or vendor security questionnaires.

• Competitive, performance-linked compensation - we pay for impact.
• Opportunity to work alongside experienced leaders
• Ownership of a high-visibility engineering function with real strategic influence.
• A fast-moving environment where your ideas ship quickly and your growth is real.
• Remote-first flexibility with a collaborative, high-agency culture.