Corporate IT Engineer

IT Operations & Employee Support

• Be the reliable face of IT for every employee; serve as first call for issues and follow through to resolution
• Own endpoint management end-to-end: MDM administration (Kandji or equivalent), device provisioning, inventory, and asset lifecycle
• Own and maintain conference room setups (Google Meet/Zoom Rooms); troubleshoot and fix issues quickly
• Administer identity providers (Okta or equivalent) and enforce access policies
• Ensure new hires are set up correctly across devices, access entitlements, and tools; manage accurate offboarding in partnership with People Ops

Security & Compliance

• Own continuous SOC 2 evidence collection and control monitoring
• Conduct and document quarterly access reviews; coordinate audit prep and serve as primary liaison with external auditors
• Administer endpoint security tooling (CrowdStrike or equivalent); monitor for anomalies and escalate/triage incidents with engineering
• Coordinate annual security training completion, track attestations, and flag gaps

Customer-Facing Security

• Maintain and improve a security response library to reduce questionnaire cycle time
• Independently respond to vendor security questionnaires (VSQs) and own security sections of due diligence questionnaires (DDQs)

SaaS & Vendor Management

• Conduct quarterly access audits across SaaS stack; manage license governance and monitor for shadow IT
• Own the vendor security review process for software and hardware procurement
• Identify opportunities to rationalize the stack and reduce tooling sprawl

Requirements

• 6+ years of IT and/or security operations experience, ideally at a scaling SaaS or fintech company
• Hands-on experience with SOC 2 Type II: evidence collection, control framework management, and auditor coordination
• Working knowledge of MDM tools (Kandji or equivalent), identity providers (Okta or equivalent), and continuous compliance platforms (Secureframe or equivalent)
• Extensive experience in a primarily Mac environment
• Comfortable coordinating compliance requirements with engineering teams
• Self-directed, organized, and calm under pressure

Nice-to-Haves

• First or early internal IT hire experience at an earlier-stage company
• Experience responding to vendor security questionnaires and customer trust reviews independently
• Direct experience with CrowdStrike, Cloudflare, or DLP tooling