Role Overview

We’re looking for anIT Managerto own our internal IT ecosystem end-to-end. This role will lead the management of laptops and workstations, define and enforce security standards, oversee SSO and identity access management, and manage SaaS and software licensing across the company. You’ll be the go-to person for keeping our environment secure, reliable, and easy to use for a mostly remote workforce.

Key Responsibilities

Endpoint & Asset Management

• Own the full lifecycle oflaptops and workstations(procurement, imaging, deployment, recovery, and decommissioning).
• Implement and administerMDM/endpoint managementtools (e.g., Intune, Jamf, Kandji, Workspace ONE) for configuration, patching, and policy enforcement.
• Maintain an accurateasset inventoryfor all company-owned devices and key peripherals.
• Define and maintainstandard imagesand baseline configurations for different roles and teams.

Identity, Access & SSO

• Administer ouridentity provider and SSO platform(e.g., Okta, Azure AD, Google Workspace), including application integrations and lifecycle management.
• Implement and maintainrole-based access control (RBAC), ensuring least-privilege access and appropriate group/role design.
• Own thejoiner/mover/leaverprocess: onboarding, offboarding, and access changes across all core systems.
• Monitor access logs and authentication events; partner with security to respond to suspicious activity.

Security & Compliance

• Define, document, and enforceIT and security policies(passwords, MFA, endpoint configuration, data handling, acceptable use, remote work standards).
• Manageendpoint security tooling(EDR/AV, disk encryption, host firewalls) and ensure coverage and compliance across devices.
• Coordinatevulnerability managementfor endpoints and core SaaS platforms, including patching schedules and exception handling.
• Supportcompliance initiatives(e.g., SOC 2, ISO 27001) by providing evidence, documentation, and implementing required controls.
• Participate incustomer-required IT/security assessments, reviews, and audits, providing accurate, timely information about our IT controls and posture.
• Run periodicsecurity awareness activities(phishing simulations, training reminders, playbooks).

SaaS & License Management

• OwnSaaS application inventoryand license assignments across the organization.
• Regularly review usage, reclaim unused licenses, and right-size contracts to control cost.
• Partner with finance and leadership onrenewals, vendor evaluations, and budgetingfor IT tooling.
• Standardize and documentapproved tools, including request and approval processes for new software.

IT Operations & Support

• Establish and continuously improveIT support processes(ticketing, SLAs, escalation paths).
• Serve as an escalation point for complex incidents and requests from employees
• Create and maintainrunbooks, FAQs, and user documentationto enable self-service where appropriate
• Partner closely withengineering, security, and operationsto ensure IT strategy aligns with company growth and technical roadmap.
• Track and report onIT KPIs(uptime, ticket volume and resolution times, compliance posture, asset coverage).

Qualifications

Required:

• 5+ years of experience inIT administration or systems engineering, including 2+ years in alead or managercapacity.
• Hands-on experience managingmacOS and/or Windowsendpoints in a distributed or remote-first environment.
• Experience administering at least oneenterprise identity platform(Okta, Azure AD, or Google Workspace) and integrating SSO with SaaS tools.
• Strong understanding ofsecurity best practicesfor endpoints, identity, and SaaS (MFA, encryption, RBAC, least privilege, logging and monitoring).
• Proven track record implementing and operatingMDM/endpoint managementtools and endpoint security solutions.
• Demonstrated ability todesign and document processes, drive adoption, and enforce standards in a growing organization.
• Bilingual in English and Spanish, with strong written and verbal communication skills in both languages.
• Excellent communication skills; able to explain technical constraints and trade-offs clearly to non-technical stakeholders.

Nice to Have:

• Experience supporting or implementingSOC 2, ISO 27001, HIPAA, or similar compliance frameworks.
• Familiarity withautomation and scripting(PowerShell, Bash, Python) for user, device, and SaaS administration.
• Background working withcloud-native and SaaS-heavyorganizations (e.g., consulting, product engineering, or data/AI firms).
• Relevant certifications (e.g.,CompTIA Security+,CISSP,Okta Certified Professional,Microsoft 365/Entra), or equivalent experience.

Nimble Gravity is an Equal Opportunity Employer and considers applicants for employment without regard to race, color, religion, sex, orientation, national origin, age, disability, genetics or any other basis forbidden under federal, state, or local law. Nimble Gravity considers all qualified applicants.