Want to know if this job is worth applying to?
Алматы, Қазақстан
Onsite
Higgsfield AI is the fastest-scaling generative AI company in history, hitting $1B in annual revenue run rate, 30M+ users worldwide, 6M+ generations per day, and powering 390 of Fortune 500 brands.
We're building at the absolute frontier of AI-powered video creation and next-generation creative tools. Joining Higgsfield means becoming part of a high-impact team shaping the future of AI-native experiences, at a company that isn't just moving fast, but rewriting what fast looks like.
We’re looking for an IT Engineer to manage and improve the company’s internal IT systems: laptops, accounts and access, endpoint security, email, corporate SaaS, and the office network. A large part of our engineering and operations team is based in Almaty, and this role supports the internal systems and tools they rely on every day.
A substantial part of the role involves handling and resolving employee requests. We’re looking for someone who can work independently, identify recurring issues, and address their root causes. The core stack is already in place: you’ll keep it reliable and well maintained, and improve systems and processes where it makes a practical difference.
You’ll work alongside Security, Infrastructure, and People Ops, with the autonomy to make most decisions within your area of responsibility.
Manage the device fleet through a cross-platform MDM platform, with most devices running macOS. Administer Apple’s business enrollment and app distribution tools, maintain configuration and compliance policies, establish rollout standards, and keep the hardware inventory accurate.
Maintain endpoint security, including encryption, OS security baselines, agent health, and reporting on coverage. Participate in testing and rollout as we transition from our current endpoint agents to a new solution.
Administer cloud directories and configure SSO and provisioning for corporate SaaS applications. Work with SAML, OIDC, SCIM, and claim mapping, and troubleshoot differences in how vendors implement these standards.
Manage transactional email through a third-party provider: sending domains, DNS, DKIM and DMARC, bounce investigation, and appropriate sending policies.
Administer our ticketing platform and its Slack integration, resolve day-to-day requests, and maintain corporate tools. Handle onboarding and offboarding end to end, including hardware, accounts, and access.
Support office IT infrastructure, including the LAN, routing, and self-hosted storage.
Part of the role involves keeping global services accessible from Kazakhstan. You’ll investigate issues at the network level—for example, why a login page won’t load—and determine whether the cause lies in the local network, routing, or the service itself.
A few years of experience in IT engineering or systems administration, ideally in a smaller company where you independently owned and resolved technical issues.
Experience managing MDM at fleet scale, including writing and debugging policies beyond device enrollment.
Cloud directory administration experience and hands-on troubleshooting with SAML, OIDC, and SCIM.
Strong knowledge of DNS and email authentication, with confidence making changes in production.
Solid networking fundamentals and the ability to analyze packet captures when logs don’t explain the issue.
Scripting skills to automate repetitive tasks.
Sound judgment to make decisions independently and recognize which decisions require input or approval from others.
English proficiency sufficient for vendor support and collaboration in a multilingual team.
Experience migrating a live device fleet from one endpoint agent to another without disrupting day-to-day work.
Experience with self-hosted storage and backups.
Experience keeping global services working reliably from Kazakhstan.
Full-time, on-site work in Almaty. You must be based in Kazakhstan and eligible to work here.
Competitive compensation in USD.
The opportunity to set the standard for the hardware and internal tools used across the company.