This role is approximately 80% security-focused and 20% IT operations, making it an ideal opportunity for a hands-on engineer who excels in security governance, cloud security, compliance, vulnerability management, and enterprise IT administration. The successful candidate will serve as a key stakeholder responsible for maintaining secure systems, enforcing security controls, supporting compliance initiatives, and ensuring a reliable technology environment across a distributed workforce.

Candidates with expertise in Cloudflare, compliance/audit programs, and asset management are strongly encouraged to apply. Experience supporting mobile environments is a plus.

Must-Have Qualifications

• Cloudflare administration and web security expertise
• Compliance and audit experience, including ISO 27001 and NIST frameworks
• IT asset management experience
• 5+ years of IT Systems Administration and/or Security Engineering experience
• Experience working across Windows, Linux, and macOS environments
• Strong understanding of identity and access management principles
• Excellent communication and documentation skills

Preferred Qualifications

• CISSP, CompTIA Security+, Google Professional Cloud Security Engineer, or similar certifications
• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or related field
• Experience with mobile security platforms and mobile device management solutions
• Experience in fast-paced technology or SaaS environments
• Scripting experience with Python or Bash

Key Responsibilities

Security Operations

• Lead and maintain the organization's security posture in alignment with ISO 27001 and NIST CSF 2.0.
• Manage vulnerability assessments, remediation tracking, and security incident response activities.
• Administer security monitoring tools, HIDS/SIEM platforms, and secrets management solutions.
• Conduct security awareness initiatives, phishing simulations, and end-user training.
• Manage vulnerability disclosure and bug bounty programs.

Cloud & Network Security

• Secure and administer Google Cloud Platform (GCP) environments, including IAM, logging, and security policies.
• Manage Cloudflare security technologies, including:
  • Web Application Firewall (WAF)
  • Zero Trust Access
  • DNS Security
  • API Protection
• Perform cloud and network security assessments and recommend improvements.
• Support Kubernetes security through RBAC, workload reviews, and container hardening best practices.

Identity & Access Management

• Administer Okta and enterprise identity management solutions.
• Manage Single Sign-On (SSO), Multi-Factor Authentication (MFA), and automated provisioning.
• Enforce least-privilege access controls and access lifecycle management.
• Support onboarding, offboarding, and role-based access reviews.

IT Infrastructure & Endpoint Management

• Manage the lifecycle of hardware and software across Windows, macOS, and Linux environments.
• Oversee VPNs, endpoint security, disaster recovery, backups, and MDM platforms.
• Provide advanced technical support and act as the escalation point for complex IT issues.
• Develop and maintain system documentation, standards, and operational procedures.

Asset Management

• Own the organization's hardware, software, and license inventory.
• Track assets from procurement through deployment, reassignment, and secure disposal.
• Maintain accurate inventory records for budgeting, compliance, and audit purposes.
• Support license audits and technology refresh planning.

Onboarding & Offboarding

• Coordinate all IT aspects of employee onboarding and offboarding.
• Provision systems, devices, and access permissions for new hires.
• Ensure complete and timely deprovisioning upon employee separation.
• Maintain documented and auditable processes for user lifecycle management.

Platforms & Vendor Management

• Administer Google Workspace, Atlassian/Jira, and other critical SaaS platforms.
• Manage vendor relationships, renewals, licensing, and procurement activities.
• Ensure platform configurations adhere to organizational security standards.

Project Management & Cross-Functional Collaboration

• Lead IT and security projects from planning through implementation.
• Partner with Engineering, HR, Finance, Compliance, and Operations teams.
• Support audit readiness, risk assessments, and security reviews.
• Drive continuous improvement initiatives across IT and security functions.