IT Engineer

Responsibilities

IT Systems Management & Support

• Own day-to-day IT operations and internal support processes, ensuring reliability and responsiveness
• Manage account provisioning and deprovisioning across systems
• Support integration of new tools, automation, and workflows across SaaS systems
• Collaborate with HR and Ops on onboarding/offboarding and asset management
• Act as an escalation point for IT issues and ensure high-quality internal support
• Maintain office networks, printers, conference rooms & Wi-Fi
• Work closely with employees and executives at Norm Ai and Norm Law to ensure technology needs are met

Strategic & Cross-Functional Contributions

• Contribute to defining and implementing company-wide IT and security policies
• Work with Engineering to align IT controls with application security posture
• Identify and implement improvements to IT automation, observability, and compliance readiness
• Drive adoption of best practices in endpoint and SaaS security hygiene

Security Mindset & Enablement

• Apply a strong security mindset to IT systems and contribute to security initiatives
• Design, implement and maintain secure baseline configurations for key IT and SaaS platforms (ex. Okta, Google Workspace, M365, Slack)
• Support device hardening efforts for company-managed endpoints
• Assist with implementation and ongoing operation of security tooling such as endpoint protection, mobile device management, and secure authentication
• Support rollout and enforcement of access controls, MFA, SSO, and device security policies
• Participate in identifying and remediating security misconfigurations and hygiene issues across endpoints and SaaS systems
• Work with security team members to remediate incidents, misconfigurations and hygiene issues
• Contribute to security-related documentation, including configurations, runbooks, and operational controls

Skills & Experience - Core

• 5-10 years of experience in IT, security engineering, or systems administration
• Proven experience with at least several of: Okta (SSO, MFA, lifecycle management, workflows), Google Workspace administration, JAMF and MacOS system hardening, Endpoint protection tools (CrowdStrike, SentinelOne, etc.), SaaS configuration management and automation
• Strong understanding of security principles (least privilege, zero trust, endpoint hardening, patching)
• Experience implementing and maintaining SSO and MDM integrations
• Excellent troubleshooting and systems-level thinking skills
• Strong written documentation and communication skills

Skills & Experience - Pluses

• Experience in startup or high-growth environments
• Familiarity with compliance frameworks (SOC2, ISO 27001, etc.)
• Automation or scripting experience (Python, Bash, MDM APIs, Okta Workflows)
• Experience managing Slack Enterprise, ChatGPT Enterprise, or similar collaboration platforms
• Experience with Microsoft 365, iManage, Intapp, and Litera
• Exposure to vulnerability management and security telemetry tools
• Security certifications (Security+, Okta Certified Professional, CISSP, etc.)

Compensation and Benefits

$130,000–$155,000 a year plus equity. The range displayed in this job posting reflects the minimum and maximum target for new hire salary for this position. Within the range, individual pay is determined by various factors, including job-related skills (as uncovered during the interview process), experience, and relevant education or training. We offer a competitive salary along with equity compensation. Our comprehensive benefits package includes a 401(k) plan with an employer match. Employees enjoy top-tier insurance coverage, encompassing health, dental, hospital, accident, and vision plans. For candidates needing to relocate to NYC, we provide relocation reimbursement. We embrace a hybrid model, typically in-office 4 days per week.