Junior IT Engineer

Internal IT is responsible for identity and access management, equipment lifecycle, cloud and AI-platform administration, and operational financials for technology consumption across the company. The team's work directly supports Arionkoder's SOC 2 Type II and ISO 27001 compliance posture, operating under defined SLAs for every request and incident it handles. As a Junior IT Engineer, you will support day-to-day HelpDesk operations, equipment management, and access administration tasks under the guidance of senior team members, while building the foundation to take on cloud and platform administration responsibilities over time.

Key Responsibilities

Access & Identity Management

• Process user access requests across Okta (SSO), Google Workspace, and company SaaS tools (Jira, Slack, HiBob, Runn, Miro, KnowBe4, Greenhouse, Confluence, Drata, Carmelo), following role-based access control principles.
• Execute onboarding and offboarding access changes within the SLA windows defined for each system, escalating security-relevant cases (e.g. compromised accounts) immediately.
• Maintain accurate, timestamped records of provisioning and deprovisioning actions to support audit trails required under SOC 2 CC6 and ISO 27001 A.9.

Equipment Lifecycle

• Support procurement, configuration, and MDM enrollment of equipment for new hires and replacements, verifying security baseline compliance before delivery.
• Coordinate equipment collection, remote wipe, and inventory updates at offboarding, escalating overdue returns per policy.
• Assist with secure decommissioning and disposal of retired equipment, including documentation of data sanitization method.

Platform & Cloud Support

• Assist with routine access requests on cloud infrastructure accounts (AWS, Google Cloud) and AI/LLM provider accounts (Anthropic, OpenAI, others) under senior supervision.
• Support API key hygiene practices, including rotation reminders and revocation of compromised or leaked keys.
• Flag anomalies in access patterns or usage for review by senior engineering or security staff.

Operational Financials

• Help prepare monthly consumption reports for AWS and AI provider accounts.
• Support monitoring of spend against budget thresholds and escalate anomalies per the defined response times.

Requirements

• 1–2 years of experience in IT support, helpdesk, or systems administration (internship experience will be considered).
• Basic understanding of identity and access management concepts (SSO, RBAC, MFA).
• Comfort navigating SaaS admin consoles and following documented procedures precisely.
• Strong attention to detail and reliability when working against defined SLAs.
• Clear written communication in English for cross-regional coordination.

Nice to Have

• Exposure to cloud platforms (AWS or Google Cloud), including IAM concepts.
• Familiarity with MDM platforms and endpoint security baselines.
• Awareness of compliance frameworks such as SOC 2 or ISO 27001.
• Spanish language proficiency, given the team's Latin American and European footprint.

What Success Looks Like

• Access requests and offboarding actions are completed within their defined SLA windows, with complete audit records.
• Equipment is delivered, collected, and disposed of following the documented chain-of-custody process.
• Anomalies and security-relevant issues are escalated promptly rather than resolved informally.
• Documentation is consistently accurate enough to serve as SOC 2 / ISO 27001 evidence without rework.