IT Systems EngineerApplication Deadline: 27 November 2026
Department: Engineering
Employment Type: Full Time
Location: Denver
Compensation: $120,000 - $150,000 / year
DescriptionTL;DR Kharon is seeking a full-time IT System Engineer based in Denver. This role requires in-office attendance at least 3 days a week.
RESPONSIBILITIES:- Provide day-to-day support for staff and white glove support for C-Suite on macOS and Windows devices, both in the Denver office and remotely for staff across our globally distributed workforce.
- Administer Jamf for macOS and Intune for Windows, including enrollment, configuration profiles, app deployment, patching, and asset inventory.
- Manage Okta as the identity provider for our tech stack including, but not limited to, Atlassian (Jira and Confluence), Slack, 1Password, and other SaaS applications, and administer Tailscale for secure network access.
- Build and maintain automated onboarding and offboarding using Okta Workflows, SCIM provisioning, and scripting, so accounts, access, and devices follow each employee's lifecycle with minimal manual steps.
- Administer Cisco Meraki and UniFi hardware across office locations, and troubleshoot LAN, Wi-Fi, VPN, DNS, and DHCP issues.
- Maintain disk encryption, patch compliance, EDR coverage, and device compliance policies in Jamf and Intune.
- Run periodic access reviews, enforce least-privilege access and 1Password vault governance, and collect and maintain evidence for security audits such as SOC 2 or ISO 27001.
- Serve as the on-site IT presence in our Denver headquarters, supporting the executive team and office systems including conference room AV and Wi-Fi, with occasional travel to support other offices.
- Deliver IT projects in partnership with the IT Lead, document processes in Confluence, and train employees on IT best practices.
QUALIFICATIONS:- At least 5 years of experience in IT support or systems administration, ideally in a multi-office or distributed company.
- Strong macOS administration experience with Jamf, plus working knowledge of Windows device management with Intune.
- Hands-on administration experience with Okta, Google Workspace, Atlassian (Jira and Confluence), Slack, and 1Password.
- Experience with Tailscale or a similar zero-trust network access tool.
- Solid understanding of networking concepts (TCP/IP, VLANs, DNS, DHCP, Wi-Fi, firewalls, VPN) and experience administering Cisco Meraki and UniFi hardware.
- Scripting experience in Bash/zsh, Python, or AppsScript , with a track record of automating IT workflows.
- Strong understanding of how to use AI tools to speed up scripting, documentation, and support workflows.
- Experience supporting remote employees across time zones.
- Experience running cable and setting up conference room AV and video conferencing equipment.
- Familiarity with endpoint security, access reviews, and supporting security audits.
- Jamf Certified Tech (Jamf 200) or Okta Certified Administrator certification preferred.
- Experience with Okta Workflows, HRIS integrations, or Jira Service Management automation.
- Experience building and refining IAM governance
- Awareness of GDPR as it applies to employee devices and accounts in EU offices preferred.
- Excellent communication skills and the ability to explain technical topics clearly to colleagues of all technical backgrounds.
The base salary range at Kharon is set between$120,000 to $150,000. Please note that this figure does not necessarily include potential bonuses, commissions, benefits, or equity that may be part of the overall compensation package.
If interested in pursuing this position, please visit www.kharon.com/careers to apply.
#LI-Hybrid #LI-AG1
