3+ years in an IT support or engineering role including macOS, Windows, and Linux
Experience in fast-paced startup environments
Proficient with endpoint management tools (e.g., Jamf, Intune)
Hands-on expertise in enterprise VPNs and wireless networking
Strong background in endpoint detection and response (EDR/XDR) platforms
Scripting and automation skills in Python, Bash, or PowerShell
Knowledge of security best practices and identity/access management.
Responsibilities
Provide IT support for various teams including ASIC design and software engineering.
Lead efficient onboarding and offboarding processes for users.
Document IT assets and support workflows comprehensively.
Manage and maintain remote devices ensuring security and usability.
Deploy mobile device management (MDM) solutions for operational efficiency.
Implement Single Sign-On (SSO) for secure access across services.
Design and manage network infrastructure to ensure security and reliability.
Benefits
Full medical, dental, and vision insurance with generous coverage.
$2,000/month housing subsidy for local employees.
Daily meals provided in the office.
Relocation assistance for new hires moving to San Jose.
Full Job Description
Job Summary
At Etched, every role is critical, but as an IT Engineer, you'll be the key to ensuring everyone can perform at their highest level. You'll be the trusted resource who keeps our high-performance engineering and operations environment running seamlessly, so teams can innovate without barriers. In this role, you'll drive company-wide productivity, empower engineers with tools and infrastructure to move at maximum velocity, and champion a culture of operational excellence across all systems. From enabling cutting-edge chip development workflows to streamlining day-to-day IT operations, you'll ensure nothing slows down our mission to build transformational AI innovation.
Key responsibilities
Provide hands-on IT delivery and support for the entire firm, including ASIC design teams, software and platform engineering, business operations, and scale-out computing teams.
Lead onboarding and offboarding processes to ensure seamless access aligned with engineering and leadership workflows.
Maintain robust documentation of IT assets, systems, access protocols, and ticket workflows.
Manage on-site and remote laptops, desktops, and networking equipment with attention to ease of use, security, and remote manageability.
Deploy and administer MDM and MAM solutions for Mac and Windows devices.
Implement and maintain antivirus, antimalware, Endpoint Detection & Response (EDR), and Extended Detection & Response (XDR).
Drive hardware procurement, staging, imaging, and maintenance for development and operations teams.
Implement and administer Single Sign-On (SSO) across core services, ensuring secure and frictionless user authentication. Okta experience a bonus
Automate user provisioning and deprovisioning workflows using Rippling, Okta, Google Workspace, and FreeIPA to streamline access management and reduce errors.
Enforce role-based access controls and audit trails to align with compliance and security standards.
Design, deploy, and maintain wired and wireless networks, including Wi-Fi access points (WAPs) and controller administration.
Configure and manage VPN infrastructure to provide secure remote access for distributed teams.
Administer firewalls, ensuring proper segmentation, policy enforcement, and protection of sensitive environments.
Develop automation scripts (Python, Bash, PowerShell) to streamline provisioning, patching, monitoring, and user lifecycle management.
Integrate monitoring and alerting systems to reduce manual workload and increase reliability.
Champion a culture of operational excellence, ensuring IT systems meet compliance standards (e.g., SOC 2, ISO 27001).
Coordinate with external vendors and partners to evaluate new products, support existing offerings, and to resolve IT issues.
Partner closely with engineering, security, and operations teams to align IT strategy with business and technical goals.
Representative projects:
Managing a mixed-OS engineering environment (Linux for EDA tools, Windows/macOS for general use) - including imaging, patching, and security hardening.
Designing and maintaining secure network infrastructure (VPNs, VLANs, firewalls, access control) to protect sensitive chip design IP.
Implementing and managing endpoint/device lifecycle systems (procurement, setup, MDM, retirement) for engineering and operations teams.
Deploying and integrating compute resources (on-prem servers and cloud environments) to support large-scale simulations and hardware workflows.
Building scalable onboarding/offboarding and IT automation workflows to ensure fast, secure ramp-up for new engineers and smooth transitions.
Strong understanding of networking fundamentals: VPNs, VLANs, firewalls.
Skilled in endpoint management, system imaging, and hardware lifecycle management.
Proficient with ticketing systems and adept at prioritizing tasks in busy environments.
Excellent communication skills and ability to work effectively with engineering teams in fast-paced, innovative settings.
You may be a good fit if you have:
5-7+ years in an IT support or engineering role with experience across macOS, Windows and Linux
Excellent problem-solving skills, with a proactive and ownership-driven mindset.
Experience working in a fast-paced startup environment.
