The Opportunity:We're looking for a
Senior IT Systems Administrator to join our growing team. This role reports directly to the Director of IT, Information & Security. In this role you will support Abby Care operations across multiple states and offshore teams. This role will own the identity, endpoint, and access foundation - Okta, JAMF, Google Workspace, and SentinelOne - that every Abby Care employee relies on to work securely, wherever they sit. As one of our first dedicated systems hires as we scale our payor-led business, you'll shape the compliance foundation and tooling stack that supports the company for years to come.
This is a
Full-Time Hybrid opportunity based in San Francisco, CA.
What you'll work on:Identity Governance & Access (Okta & IaC)- Administer Okta lifecycle management (SSO, SAML/OIDC/SCIM, MFA, conditional access) enforcing least-privilege access.
- Manage RBAC policies and identity resources as code using Terraform and CI/CD pipelines.
- Lead access certifications and remediation in partnership with Security for compliance (SOC 2, ISO 27001).
Endpoint Management & Security (JAMF & SentinelOne)- Manage the macOS fleet via JAMF Pro, overseeing zero-touch deployment (ADE), patch management, and security compliance.
- Deploy and maintain SentinelOne agents, triaging alerts, enforcing ransomware protection, and handling threat remediation.
Productivity & Core Systems (Google Workspace & IT Ops)- Administer Google Workspace (user lifecycle, DLP, Vault, security policies) and integrate with core identity and endpoint tools.
- Serve as Tier 2/3 escalation support, driving IT automation via scripting/APIs and managing hardware and SaaS inventories.
What you'll have:- 6+ years of experience in IT systems administration or a related role
- Associate's or Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related field, or equivalent practical experience
- Hands-on administration experience with Okta (or a similar IdP) and a strong grasp of core IAM standards (SSO, MFA, SCIM, SAML/OIDC)
- Proven track record managing macOS fleets in an enterprise setting using JAMF (or similar MDM), SentinelOne (or similar EDR/XDR), and Google Workspace
- Core understanding of networking fundamentals (DNS, DHCP, VPN) and technical troubleshooting
- Strong technical documentation habits and the ability to independently prioritize and manage multiple tickets and projects
Nice to have:- Practical scripting experience (Bash, Python, or Google Apps Script) to automate routine workflows and integrations
- Exposure to Windows endpoint management (Intune) and administration of modern SaaS tools (Slack, Zoom)
- Experience supporting audit preparation and security controls for SOC 2, ISO 27001, or HIPAA
- Relevant credentials such as Okta Certified Administrator, JAMF Certified Admin, or CompTIA Security+
Benefits:- Competitive compensation packages that reflect the value you bring. We reward our team for the impact of their work.
- Comprehensive health coverage that works for you. Choose from high-quality medical dental and vision options, including a $0 deductible PPO and a company-funded HSA, alongside employer-paid life and disability insurance.
- Generous paid time off. We provide policies that allow you to recharge along with 10 paid company holidays.
- Financial savings benefits to support your future. We support your financial well-being with HSA contributions, optional FSA and commuter benefits, and full coverage of all 401(k) account fees (employer match not currently offered).
- Paid parental leave to support your growing family. We provide up to 10 weeks of paid parental leave based on tenure, so you can focus on bonding and adjusting to life as your family grows.
