IT and Security Generalist

Accountabilities:

• Administer identity systems, including users, groups, applications, and device trust, while managing the macOS device fleet through the organization’s MDM platform.
• Monitor and refine automated employee onboarding and offboarding workflows, investigate exceptions, and maintain reliable lifecycle processes.
• Maintain and extend automation supporting lifecycle management, security monitoring, reporting, and LLM-assisted triage workflows.
• Build automation for recurring manual processes, monitor workflows after deployment, troubleshoot failures, and retire solutions that are no longer needed.
• Respond to security alerts from endpoint, cloud, and identity systems within defined SLAs; investigate and document security events and escalate incidents according to established procedures.
• Support vulnerability management by reviewing findings, coordinating remediation with engineering teams, and reporting progress.
• Participate in application security reviews covering engineering changes, integrations, authentication, authorization, and data-handling practices, helping establish secure defaults early in the development process.
• Maintain automated audit evidence collection and investigate gaps, while preparing additional evidence for SOC 2 and HITRUST assessments when required.
• Provide workforce support for access or system issues that require human judgment beyond automated helpdesk processes, and create clear end-user documentation.
• Document decisions, changes, and status updates; test changes before production deployment and continuously improve operational processes.

Requirements

• 4–5 years of experience in fast-moving IT, security operations, systems administration, or equivalent demonstrated experience.
• Working knowledge of identity and access management platforms such as Okta, along with practical macOS administration experience.
• Some scripting experience and a solid understanding of scripting fundamentals, with exposure to or strong interest in workflow automation tools, APIs, LLMs, and GenAI.
• Familiarity with core security concepts including authentication, least privilege, logging, security monitoring, and incident response.
• Clear and concise written communication, with the ability to explain problems, decisions, and status updates effectively.
• Strong ownership and accountability, including monitoring systems, addressing issues promptly, and ensuring that solutions remain reliable after deployment.
• Good judgment about when to act independently and when to seek guidance, with a proactive approach to communicating blockers and discussing important decisions.
• Exposure to HIPAA, SOC 2, or HITRUST environments is a plus.
• Experience with AWS or GCP administration, EDR, SIEM, or cloud security monitoring tools is desirable.
• A completed or in-progress security certification is also advantageous.

Benefits

• Annual compensation of $110,000–$120,000, based on prior experience, performance, and market factors.
• Eligibility for a 10% annual bonus.
• Medical, dental, and vision insurance.
• Flexible Spending Account (FSA).
• Health Savings Account (HSA) with employer match.
• Company-paid short-term and long-term disability, AD&D, and life insurance.
• Paid family leave.
• 401(k) with employer match.
• Paid time off.
• Full-time remote work within the United States.
• Broad exposure across IT, automation, security operations, and application security, with a defined development path toward a Security Engineer role.