The Role

We are looking for an experienced IT Systems Administrator / Workplace Operations Engineer to take full ownership of our internal technology infrastructure, global device fleet, and identity management across our growing, distributed team (US and India).

In this role, you will design, deploy, and maintain zero-touch device provisioning, enforce enterprise security standards, manage our SaaS application ecosystem, and deliver seamless onboarding and offboarding experiences for all team members.

What You Will Do

1. Global Device Fleet Management & MDM

• Manage zero-touch device deployment using Apple Business Manager (ABM) and Microsoft Intune.
• Enforce endpoint security policies, including FileVault, BitLocker, OS patching, screen-lock policies, and firewall configurations.
• Monitor device health and compliance, and perform remote wipes, device locks, and credential revocations for lost, stolen, or offboarded devices.

2. Hardware Logistics & Asset Lifecycle Management

• Manage global laptop procurement and delivery across the US and India, coordinating with hardware vendors and authorised resellers.
• Oversee device returns, shipping logistics, hardware diagnostics, secure re-imaging, and asset redistribution.
• Maintain an accurate hardware inventory, including serial numbers, specifications, warranty details, and employee assignments.

3. Identity, Access Governance & SaaS Management

• Administer Microsoft 365 and Microsoft Entra ID, including SSO, MFA, role-based access controls, shared mailboxes, and user directories.
• Manage user provisioning, access permissions, license allocation, and de-provisioning across Slack, Microsoft Teams, Atlassian, Google Workspace, and DocuSign.
• Coordinate with People Operations to ensure timely access provisioning for new hires and immediate access revocation during offboarding.

4. IT Helpdesk & Internal Documentation

• Provide technical support for hardware issues, account lockouts, VPN connectivity, network access, software installations, and system permissions.
• Troubleshoot IT incidents and resolve employee support requests within defined service levels.
• Create and maintain IT documentation, self-service guides, security policies, and employee onboarding procedures.

5. Security & Compliance Readiness

• Maintain IT operations in alignment with SOC 2 Type II, ISO 27001, GDPR, and internal security requirements.
• Conduct regular access reviews, monitor audit logs, and maintain evidence for internal and external audits.
• Identify and remediate security gaps while collaborating with Security and Compliance teams to maintain continuous audit readiness.

Required Qualifications

• 3–6 years of experience in IT systems administration, desktop engineering, or workplace technology, preferably within a fast-growing tech startup or modern cloud environment.
• Deep hands-on expertise with Microsoft Intune & Entra ID: Proven track record creating configuration profiles, compliance policies, conditional access rules, and deployment packages.
• Advanced Apple Fleet Management: Solid understanding of Apple Business Manager (ABM), Apple Push Notification service (APNs), and Automated Device Enrollment (ADE) for macOS.
• Cross-Border Operations: Demonstrated experience managing distributed hardware logistics, procurement, and remote onboarding across both North America and India.
• Strong Communication & Ownership: Ability to work autonomously, prioritize operational issues, and communicate clearly with both technical and non-technical stakeholders.

Nice to Have

• Experience supporting a company through a successful SOC 2 Type II audit.
• Experience with scripting and automation (PowerShell, Bash, Python, or Microsoft Graph API).
• Relevant industry certifications (e.g., Microsoft Certified: Endpoint Administrator Associate, Apple Certified Support Professional, or Jamf Certified).