4+ years in IT engineering or systems administration, preferably in a high-growth startup or security-focused environment.
Hands-on experience with identity providers like Okta or Google Workspace, focusing on SSO and SCIM.
Proficient in managing macOS fleets using MDM solutions such as Jamf or Kandji.
Knowledge of endpoint security tools and their impact on access decisions.
Scripting skills in Python, Bash, or PowerShell, with a focus on automation.
Experience with compliance audits like SOC 2 or ISO 27001, including managing controls and evidence.
Ability to balance security, cost, and employee experience, with clear communication of tradeoffs.
Responsibilities
Own identity and access management, including SSO, MFA, and automated provisioning tied to HRIS.
Deploy and manage macOS device fleet through MDM, ensuring security and compliance.
Create zero-touch onboarding processes for new hires and efficient offboarding procedures.
Administer SaaS tools, managing licenses and minimizing sprawl and costs.
Automate repetitive IT tasks using scripts and workflow tools instead of relying on tickets.
Collaborate with security teams to maintain controls for SOC 2 Type II and ISO 27001 compliance.
Establish IT operations for UK expansion, including hardware procurement and regional requirements.
Serve as the escalation point for internal IT support, developing documentation and self-service resources.
Benefits
Flexible work environment with opportunities for remote work.
Support for professional development and certifications.
Collaborative culture with a focus on security and innovation.
Health and wellness benefits to support employee well-being.
Equity component as part of the compensation package.
Full Job Description
The role
As our IT Engineer, you'll own the systems every Artemis employee depends on to do their job: identity, devices, SaaS, and the onboarding and offboarding flows that tie them together. We sell security, so our own environment has to be a model of it. You'll build IT that is secure by default, automated wherever possible, and ready to scale from 55 to several hundred people across the US and UK.
This is a hands-on, high-ownership role. You'll work closely with our security and operations teams and have real say in the tools and architecture we standardize on.
Responsibilities
Own identity and access management: SSO, MFA, and role-based access across our SaaS stack, with automated provisioning and deprovisioning tied to our HRIS
Deploy and manage our device fleet (primarily macOS) through MDM, including enrollment, configuration baselines, patching, disk encryption, and EDR coverage
Build zero-touch onboarding so new hires are productive on day one, and offboarding that removes access within minutes, not days
Run SaaS administration and lifecycle management: evaluating tools, managing licenses, and cutting sprawl and spend
Automate repetitive IT work with scripts and workflow tools rather than tickets
Partner with security to produce and maintain the controls and evidence behind our SOC 2 Type II and ISO 27001 programs
Stand up IT for our UK expansion, including hardware procurement, shipping, and region-specific requirements
Serve as the escalation point for internal IT support, and build the documentation and self-service that keep support volume low as we grow
Qualifications
4+ years in IT engineering or systems administration, ideally at a high-growth startup or security-focused company
Hands-on experience administering an identity provider such as Okta, Google Workspace, or Entra ID, including SSO, SCIM, and conditional access
Deep experience managing macOS fleets through an MDM such as Jamf or Kandji
Working knowledge of endpoint security tooling and how device posture feeds into access decisions
Scripting ability in Python, Bash, or PowerShell, and a habit of automating anything you've done twice
Experience supporting compliance audits like SOC 2 or ISO 27001, including owning controls and producing evidence
Sound judgment on tradeoffs between security, cost, and employee experience, and the ability to explain those tradeoffs clearly
Nice to have
You've been the first or only IT hire and built the function from scratch
Experience with workflow automation platforms such as Okta Workflows, Zapier, or Tines
Familiarity with cloud environments (AWS, GCP) and infrastructure-as-code
Experience supporting a distributed team across the US and UK or EU
Relevant certifications such as Jamf, Okta, or Apple certifications
Compensation
We offer a competitive compensation of $160,000-$180,000 per year, and a top-of-market equity component. A variety of factors are considered when determining the compensation, including a candidate's professional experience. Final offer amounts may vary from the amounts listed.
