IT Manager

About the Opportunity

The organization is seeking an IT Manager to direct day-to-day IT operations, user lifecycle management, and identity and access management (IAM) for a distributed team.

This role operates as a hands-on, single-person IT and security function, serving as the sole technical resource and primary escalation point across all IT and security matters while owning processes end-to-end. Reporting directly to the Chief Information Security Officer (CISO) as an operational partner on access and security, the position involves provisioning and deprovisioning accounts, managing device fleets, establishing IT standards, and driving endpoint security. Long-term potential includes building and leading a team as the function scales.

Key Responsibilities

• Serve as the primary point of contact and escalation lead for Tier 1 through Tier 3 technical support requests via ticketing systems, resolving tickets within defined SLAs.
• Support end users across both Windows and macOS environments, resolving hardware, operating system, application, connectivity, printing, email, and general access issues.
• Establish and maintain documentation standards, including records of common issues, technical resolutions, and internal reference guides.
• Direct end-to-end onboarding and offboarding, covering user training on internal systems, account provisioning, device configuration, and access revocation.
• Lead identity and access management strategy, including periodic access reviews, role and permission assignments, SSO configuration, and least-privilege enforcement.
• Administer Microsoft Intune, Microsoft 365, and Google Workspace across a remote, multi-OS fleet.
• Deploy, monitor, and manage Microsoft Defender, patch management, and endpoint security policies, including encryption and compliance configurations.
• Coordinate hardware logistics, including shipping, receiving, inspecting, and storing company equipment for onboarding, offboarding, and repairs.
• Track device inventory throughout the hardware lifecycle and make procurement recommendations.
• Support, maintain, and troubleshoot core organizational SaaS applications and tools, including Slack and Atera.
• Partner with the CISO on security initiatives, access requests, MFA/conditional access policies, and operational remediation items.

Required Qualifications

• 7+ years of IT support and operations experience, including demonstrated experience serving as the senior or sole IT resource.
• Startup experience operating as a one-person IT department managing infrastructure, security, device fleets, IAM, and end-user support concurrently.
• Strong working knowledge of security fundamentals, including endpoint protection, identity and access security, encryption, patch management, and remote-work security practices.
• Hands-on experience administering Microsoft Intune, Microsoft Defender, endpoint security tools, patch management systems, and Google Workspace.
• Proven experience supporting both Windows and macOS operating systems.
• Demonstrated background managing IAM strategy, onboarding and offboarding workflows, and ticketing systems within defined SLAs.
• Understanding of Protected Health Information (PHI) and HIPAA compliance requirements.
• Strong written and verbal communication skills, with the ability to convey technical concepts to non-technical staff and present to leadership.
• Strong customer service orientation with a patient and empathetic support approach.
• Ability to work independently, manage competing priorities, and resolve ambiguous technical problems.
• Willingness to ship, receive, and temporarily store organizational hardware (such as laptops) at home for device lifecycle logistics.
• Based in the United States within the Eastern Time Zone.

Preferred Qualifications

• Scripting experience using PowerShell or Bash for task automation.
• Hands-on experience with Atera.
• Familiarity with SOC 2 compliance frameworks.
• Security certifications or demonstrable security project experience, such as multi-factor authentication rollouts, endpoint hardening, or incident response.
• Experience mentoring or providing technical guidance to junior IT personnel.
• Microsoft 365 Certified: Endpoint Administrator Associate certification.
• Google Workspace Administrator certification.
• CompTIA Security+ certification.
• ITIL Foundation certification.

Compensation and Benefits

• Base salary range: $110,000 to $120,000 per year, commensurate with direct and relevant experience.
• Stock option grant.
• Comprehensive health, dental, and vision insurance.
• Paid time off and annual paid holidays.
• 401(k) retirement plan.
• Life insurance, short-term disability, and long-term disability coverage.

Location and Schedule

• Full-time remote position open to candidates residing in the contiguous United States within the Eastern Time Zone.
• Due to operational and compliance constraints, candidates residing in Alabama, North Dakota, Hawaii, Puerto Rico, or outside the contiguous United States cannot be considered.
• Standard working schedule is Monday through Friday, 8:00 AM to 5:00 PM Eastern Time, with availability as needed to respond to urgent issues.