IT Engineer
IT Engineer responsible for implementing, operating, and securing IT systems including SaaS platforms, endpoints, and networks with a strong security focus. Requires 5-10 years experience in IT/security engineering, hands-on expertise with tools like Okta, JAMF, and endpoint protection, plus a security-first mindset.
About the job
Responsibilities
IT Systems Management & Support
- Own day-to-day IT operations and internal support processes, ensuring reliability and responsiveness
- Manage account provisioning and deprovisioning across systems
- Support integration of new tools, automation, and workflows across SaaS systems
- Collaborate with HR and Ops on onboarding/offboarding and asset management
- Act as an escalation point for IT issues and ensure high-quality internal support
- Maintain office networks, printers, conference rooms & Wi-Fi
- Work closely with employees and executives at Norm Ai and Norm Law to ensure technology needs are met
Strategic & Cross-Functional Contributions
- Contribute to defining and implementing company-wide IT and security policies
- Work with Engineering to align IT controls with application security posture
- Identify and implement improvements to IT automation, observability, and compliance readiness
- Drive adoption of best practices in endpoint and SaaS security hygiene
Security Mindset & Enablement
- Apply a strong security mindset to IT systems and contribute to security initiatives
- Design, implement and maintain secure baseline configurations for key IT and SaaS platforms (ex. Okta, Google Workspace, M365, Slack)
- Support device hardening efforts for company-managed endpoints
- Assist with implementation and ongoing operation of security tooling such as endpoint protection, mobile device management, and secure authentication
- Support rollout and enforcement of access controls, MFA, SSO, and device security policies
- Participate in identifying and remediating security misconfigurations and hygiene issues across endpoints and SaaS systems
- Work with security team members to remediate incidents, misconfigurations and hygiene issues
- Contribute to security-related documentation, including configurations, runbooks, and operational controls
Skills & Experience - Core
- 5-10 years of experience in IT, security engineering, or systems administration
- Proven experience with at least several of: Okta (SSO, MFA, lifecycle management, workflows), Google Workspace administration, JAMF and MacOS system hardening, Endpoint protection tools (CrowdStrike, SentinelOne, etc.), SaaS configuration management and automation
- Strong understanding of security principles (least privilege, zero trust, endpoint hardening, patching)
- Experience implementing and maintaining SSO and MDM integrations
- Excellent troubleshooting and systems-level thinking skills
- Strong written documentation and communication skills
Skills & Experience - Pluses
- Experience in startup or high-growth environments
- Familiarity with compliance frameworks (SOC2, ISO 27001, etc.)
- Automation or scripting experience (Python, Bash, MDM APIs, Okta Workflows)
- Experience managing Slack Enterprise, ChatGPT Enterprise, or similar collaboration platforms
- Experience with Microsoft 365, iManage, Intapp, and Litera
- Exposure to vulnerability management and security telemetry tools
- Security certifications (Security+, Okta Certified Professional, CISSP, etc.)
Compensation and Benefits
$130,000–$155,000 a year plus equity. The range displayed in this job posting reflects the minimum and maximum target for new hire salary for this position. Within the range, individual pay is determined by various factors, including job-related skills (as uncovered during the interview process), experience, and relevant education or training. We offer a competitive salary along with equity compensation. Our comprehensive benefits package includes a 401(k) plan with an employer match. Employees enjoy top-tier insurance coverage, encompassing health, dental, hospital, accident, and vision plans. For candidates needing to relocate to NYC, we provide relocation reimbursement. We embrace a hybrid model, typically in-office 4 days per week.
Skills
Okta, Google Workspace, Jamf, macOS, Crowdstrike, Sentinelone, SSO, MDM, MFA, Python, Bash, Microsoft 365, Slack
Similar jobs
IT Support jobs
Clay
New York, NY
Provides first-line IT support across access, SaaS administration, hardware, onboarding, office technology, and employee requests while helping build scalable ITSM workflows and processes. Requires 3–5 years of IT support experience and strong SaaS, identity, and service-delivery skills.
Instacart
United StatesOwns technical development and integrations across Oracle Fusion Cloud financial systems, including BIP reporting, FBDI data loads, document templates, and REST/SOAP interfaces. Requires 5+ years of Oracle Fusion development experience and strong technical documentation skills.
Headway
New York, NY
Own escalated IT support while managing networking and conference room AV across three offices. The role requires 3+ years of distributed-company IT experience, cloud-managed networking expertise, and hands-on administration of identity, collaboration, endpoint, and service-management platforms.
Alembic
San Francisco, CA
Own end-to-end Corporate IT for a fast-growing Causal AI startup: manage employee lifecycle, identity/device stack, internal support, and automation initiatives.
Skydio
San Mateo, CAAdministers and scales the company’s Workday ecosystem, focusing on operational modules, reporting, data loads, testing, and tier-2 support. Requires at least three years of Workday administration experience and broad HCM knowledge.