Note: The job is a remote job and is open to candidates in USA. Epic Kids is a digital reading platform for children that provides books, videos, and educational content through a safe learning experience. The IT Systems Administrator will run day-to-day IT operations, manage identity and access, endpoints, applications, and employee support, while maintaining audit-ready controls and partnering on compliance, onboarding, offboarding, and security activities.
Responsibilities
- Administer corporate identity and access across Google Workspace and our core business applications -- accounts, groups, roles, and least-privilege permissions
- Evolve the identity stack -- single sign-on, lifecycle automation, and identity tooling as needs grow
- Own the user lifecycle end to end -- provisioning at hire, changes at role transitions, and complete, timely deprovisioning at exit
- Run periodic user access reviews across in-scope systems and drive the remediation they surface to closure
- Enforce authentication and device standards -- multi-factor enrollment, encryption, patching, and configuration baselines
- Own device provisioning -- MDM enrollment and laptop setup, including zero-touch deployment
- Produce and maintain evidence for IT-owned controls, and support audits, customer security questionnaires, and vendor security reviews
- Maintain the inventory of applications, hardware assets, and the access each grants
- Handle day-to-day IT support for employees
- Define and document IT procedures and keep runbooks current
- Partner with infrastructure and people operations on policy rollout, security-awareness training completion, and incident response for IT-owned systems
Skills
- 5+ years in IT administration or IT operations, with hands-on identity, endpoint, and business-application administration beyond ticket-queue support
- Experience supporting a formal compliance program (SOC 2, ISO 27001, or similar) -- access reviews, evidence collection, and working with auditors
- Working knowledge of identity and access management -- single sign-on, multi-factor authentication, and user lifecycle management
- Experience administering Google Workspace or a comparable productivity and identity suite
- Strong troubleshooting across hardware, operating systems, networking, and SaaS applications
- Clear communication and documentation, supporting both technical and non-technical employees
- Bachelor's degree or equivalent practical experience
- Experience managing a macOS fleet with a modern MDM platform (Jamf, Kandji, Intune, or similar)
- Experience implementing conditional / context-aware access (geo- and network-based restrictions)
- Familiarity with data-residency and privacy requirements (COPPA, FERPA, GDPR)
- Experience with a compliance automation platform (Vanta, Drata, or similar)
- Experience with identity-governance or access-review tooling (SailPoint, Certalign, Lumos, or similar)
- Experience with SSO integrations using SAML and SCIM
- Scripting to automate routine administration (Python, Bash, or PowerShell)
Benefits
- This is a fully remote, US-based role
Company Overview
Company H1B Sponsorship