Note: The job is a remote job and is open to candidates in USA. AgentSync is a venture-backed SaaS company focused on making compliance easier. The IT Operations Engineer will own identity, endpoint, and SaaS infrastructure, automate IT workflows, manage access and device programs, lead IT projects, and partner with Engineering, Security, and business teams to improve internal support and compliance.
Responsibilities
- Own and mature our identity provider (Okta) — SSO/SAML/OIDC integrations, SCIM provisioning, lifecycle management, and least-privilege RBAC across our SaaS estate
- Build the IAM and RBAC foundations that let us grow: consistent access models, automated joiner/mover/leaver workflows, and access reviews that hold up under audit
- Design and scale our macOS endpoint program in JAMF — zero-touch provisioning, patching, configuration profiles, and compliance baselines — with a clear roadmap toward MDM maturity
- Automate manual IT workflows with scripting and integrations so that onboarding, offboarding, and access requests are repeatable rather than tribal knowledge
- Define and report the KPIs that measure IT Operations effectiveness — response and resolution times, provisioning cycle time, patch and MDM compliance, and license utilization — and use them to drive investment decisions
- Lead IT projects end to end with loose or evolving requirements: frame the problem, plan the phases, sequence the work, communicate timelines, and deliver
- Prioritize a heavy queue of competing requests and incidents without losing the thread on long-term project work
- Partner with Security and Compliance to support SOC 2 evidence collection, access reviews, and audit readiness
- Troubleshoot escalated issues across identity, networking, endpoints, and SaaS applications — including the ones nobody has documented yet
- Support employees with genuine customer love, managing frustration with patience while getting to the real fix and preventing the repeat
- Administer and improve our ticketing and collaboration platforms so requests are routed, tracked, and measured rather than lost in DMs
- Regularly bridge the gap between IT and Engineering, Security, and business teams as a champion of cross-team collaboration
- Provision and manage employee hardware
- Participate in helping to build and maintain a culture of IT and engineering best practices
Skills
- Significant hands-on experience in IT Operations or IT Engineering, ideally at a startup or other high-growth, fast-changing environment
- Deep experience administering an identity provider and access permissions at scale (Okta strongly preferred), including SAML, SSO, OIDC, and automated provisioning
- Strong macOS fleet management experience with an MDM (Jamf preferred), and a clear point of view on what a mature MDM solution looks like and how to get there
- Working knowledge of AWS, including cloud identity and access management
- Solid Linux fundamentals and networking knowledge — comfortable reasoning through the OSI model when troubleshooting
- Scripting and automation experience (Python, Bash) paired with an automation-first mindset
- Familiarity with security and compliance frameworks (SOC 2) and how IT controls support them
- Experience administering ticketing and collaboration platforms and improving the workflows that run on them
- A track record of leading projects without being handed direction, and of executing from scratch in ambiguous situations
- Experience mentoring, leading, or otherwise growing the people around you
- The desire to work on a collaborative, learning oriented team
- Strong verbal and written communication skills, with the ability to explain identity, access, and endpoint concepts to non-technical audiences
- A scrappy, roll-up-your-sleeves mentality — you thrive with ambiguity and ownership
- Our ideal candidate will live within 25 miles of our office in Denver
- Other states we're able to consider candidates in CA, CO, CT, GA, IL, IN, KS, MA, MD, MI, MN, MO, NC, NY, OR, TN, TX, UT, and WA
- We are not hiring or able to consider candidates in New York metro, Seattle metro, or Bay Area
- We are not able to consider candidates who require a work visa now or in the future
- Okta strongly preferred
- Jamf preferred
Benefits
- Annual company bonus program
- Equity in the form of stock options
- Medical - Multiple Cigna plans to choose from, with up to 80% employer paid premiums for you and your dependents
- Dental - Multiple Cigna plans with up to 80% employer paid premiums for you and your dependents
- Vision - 80% paid premium plan for you and your dependents
- Employee Assistance Plan, Life & AD&D Insurance
- 401(k) retirement savings plan
- HSA employer contributions
- Flexible PTO
- 12 paid holidays per year
- 12 weeks parental leave w/generous return to work stipend
Company Overview