We9re looking for a hands-on IT Leader to own the end-to-end internal information technology function at ASAPP, reporting to the VP and Head of Security and Trust. The scope spans identity and access management, endpoint and device management, SaaS and AI platform administration, service desk, security and compliance operations support, and physical office infrastructure, supported by a team of 4 to 5 IT engineers.
This is a technical leadership role. The right candidate is equally comfortable driving strategy and getting into the details, whether that9s reviewing an MDM configuration, building automation, managing the company9s AI productivity stack, or partnering with the Security team on a SOC 2 audit cycle.
This role has a hybrid schedule, with 3-days a week in our NYC office.
What you9ll doIdentity & Access Management- Own the full identity lifecycle across Okta, including provisioning, deprovisioning, SSO/SCIM integrations, and group-based access policies.
- Partner with Security Engineering to enforce least-privilege access across cloud and SaaS platforms.
- Lead access reviews, audit support, and IAM-related compliance deliverables in partnership with the Security and Privacy team.
Endpoint & Device Management- Manage macOS and mobile fleet via MDM (Kandji/Iru), including configuration profiles, software packaging, and compliance enforcement.
- Coordinate device lifecycle from procurement through decommission, including Apple Business Manager and supervised device workflows.
- Maintain CrowdStrike Falcon deployment and endpoint security posture.
AI Platforms & Tooling- Own the administration and governance of company-wide AI platforms, including Claude Enterprise - managing user provisioning, usage policies, SSO integration, and adoption across teams.
- Evaluate and onboard new AI productivity tools, ensuring they meet security and compliance standards before deployment.
- Partner with Engineering and business leadership to identify opportunities where AI tooling can reduce operational toil and improve team effectiveness.
- Administer and optimize the broader SaaS stack, including evaluation, onboarding, SSO integration, and license management.
- Build and maintain automation to reduce manual IT toil, including scripting, GitHub Actions, API integrations, and MDM-delivered configurations.
- Lead or support strategic tooling rollouts (e.g., AI productivity platforms, developer toolchains).
Security & Compliance Support - Partner with the Security and Privacy team on compliance programs (SOC 2, ISO, etc.) using tools like Drata, Proofpoint, and related platforms.
- Own IT9s contribution to audit readiness, evidence collection, and policy enforcement.
- Partner with Security Engineering to respond to and triage security incidents as they relate to endpoints, accounts, and SaaS access.
Infrastructure & Office- Oversee on-prem and colo infrastructure as needed, including coordination with SRE on shared systems.
- Manage physical office technology: AV, networking, access control, and conference room systems across office locations.
Team & Stakeholder Management- Lead, mentor, and grow the IT team across support, systems engineering.
- Serve as the primary IT partner to HR, Finance, Legal, and Engineering leadership.
- Drive clear, timely communication for incidents, changes, and outages across the organization.
What we9d like to see- 7+ years of IT experience with modern tech stack, with at least 3 years in a leadership or management role.
- Deep hands-on experience with Okta (SSO, SCIM, lifecycle management) and macOS MDM platforms (Kandji, Jamf, or equivalent).
- Strong working knowledge of SaaS administration, access management, and IT tooling.
- Experience administering AI platforms such as Claude Enterprise, Microsoft Copilot, or similar - including governance, access control, and change management.
- Experience supporting compliance frameworks (SOC 2, ISO 27001) in an IT capacity.
- Experience writing scripts and building lightweight automation (Bash, Python, or similar) is a plus.
- Excellent written and verbal communication skills; able to translate technical issues for non-technical stakeholders.
- Experience managing distributed or hybrid teams is a plus.
- Familiarity with cloud environments (GCP, AWS, or Azure) and infrastructure concepts are a plus.
Benefits- Competitive compensation with stock options
- Comprehensive medical, vision, and dental insurance
- 401k matching
- Fitness and wellness stipend
- Mobile phone reimbursement
- Mental well-being benefits
- Professional learning and development stipend
- Parental leave, including adoptive and foster parents
- 3 weeks paid time off (increases with tenure) along with sick leave
$200,000 - $250,000 a year
The listed range reflects total cash compensation (salary and bonus). In addition, this role includes a compelling equity grant comprised of stock options.
