Corporate IT Engineer
First dedicated IT and Security operator responsible for endpoint management, identity administration, SOC 2 compliance, and vendor security reviews at a scaling NYC fintech startup.
About the job
IT Operations & Employee Support
- Be the reliable face of IT for every employee; serve as first call for issues and follow through to resolution
- Own endpoint management end-to-end: MDM administration (Kandji or equivalent), device provisioning, inventory, and asset lifecycle
- Own and maintain conference room setups (Google Meet/Zoom Rooms); troubleshoot and fix issues quickly
- Administer identity providers (Okta or equivalent) and enforce access policies
- Ensure new hires are set up correctly across devices, access entitlements, and tools; manage accurate offboarding in partnership with People Ops
Security & Compliance
- Own continuous SOC 2 evidence collection and control monitoring
- Conduct and document quarterly access reviews; coordinate audit prep and serve as primary liaison with external auditors
- Administer endpoint security tooling (CrowdStrike or equivalent); monitor for anomalies and escalate/triage incidents with engineering
- Coordinate annual security training completion, track attestations, and flag gaps
Customer-Facing Security
- Maintain and improve a security response library to reduce questionnaire cycle time
- Independently respond to vendor security questionnaires (VSQs) and own security sections of due diligence questionnaires (DDQs)
SaaS & Vendor Management
- Conduct quarterly access audits across SaaS stack; manage license governance and monitor for shadow IT
- Own the vendor security review process for software and hardware procurement
- Identify opportunities to rationalize the stack and reduce tooling sprawl
Requirements
- 6+ years of IT and/or security operations experience, ideally at a scaling SaaS or fintech company
- Hands-on experience with SOC 2 Type II: evidence collection, control framework management, and auditor coordination
- Working knowledge of MDM tools (Kandji or equivalent), identity providers (Okta or equivalent), and continuous compliance platforms (Secureframe or equivalent)
- Extensive experience in a primarily Mac environment
- Comfortable coordinating compliance requirements with engineering teams
- Self-directed, organized, and calm under pressure
Nice-to-Haves
- First or early internal IT hire experience at an earlier-stage company
- Experience responding to vendor security questionnaires and customer trust reviews independently
- Direct experience with CrowdStrike, Cloudflare, or DLP tooling
Skills
MDM, Kandji, Okta, SOC 2, Crowdstrike, Secureframe, Zoom Rooms, Google Meet, Endpoint Security, Identity Management
Similar jobs
IT Support jobs
Zoox
Foster City, CA
Owns Zoox’s enterprise audiovisual platform, including Zoom Rooms, conferencing hardware, digital signage, and site builds. The role provides advanced troubleshooting, vendor coordination, event support, and executive assistance while leading contractors and shaping the AV roadmap.
Justworks
New York, NY
Administer and architect enterprise SaaS platforms, lead AI enablement and automation initiatives, optimize licensing and security, and support identity lifecycle workflows. Requires 5+ years of IT systems experience and hands-on expertise with Okta, Jira, Confluence, Google Workspace, and Slack.
Harvey
New York, NYOwn and scale Harvey’s macOS, Windows, and mobile endpoint platform, including device lifecycle automation, security posture, and complex issue resolution. Requires 5+ years of endpoint or IT systems engineering experience and ownership of a 1,000+ device macOS MDM environment.
Clay
New York, NY
Own the operational systems, asset data, vendors, SaaS administration, and compliance processes that support a rapidly scaling IT function. The role requires 6–8+ years of IT experience, deep MDM and Okta expertise, and familiarity with ITAM, audits, and SaaS governance.
Duolingo
Pittsburgh, PAThe Senior Enterprise Engineer builds and operates internal identity, SaaS, endpoint, and employee-lifecycle platforms using infrastructure as code, automation, and operational best practices. The role requires senior-level engineering experience with IAM integrations, CI/CD, APIs, and cross-functional delivery.