Senior Associate Support Engineer

About the Role

You'll join Parachute Health's IT & Security team, working alongside engineers and analysts who keep our healthcare technology environment secure, compliant, and operationally efficient. You'll gain hands-on exposure to identity, endpoint, network, and cloud security, compliance, and incident response in an environment governed by SOC 1, SOC 2, and HITRUST CSF.

You won't just sit behind a desk. You'll be a part of a fast-paced environment, work closely with IT and Security professionals on real projects and sit in on incident response and architecture discussions

Responsibilities 

IT operations & endpoint

• Support day-to-day IT operations: user onboarding/off-boarding, hardware provisioning, troubleshooting tickets, and end-user support.
• Help manage our macOS laptop fleet, MDM enrollment, configuration, software deployment, and compliance baselines.
• Troubleshoot connectivity, hardware, software, and authentication issues across Mac, Linux, and Windows environments.
• Document fixes, runbooks, and FAQs to help the team scale.

Identity & access

• Assist with Okta administration, user lifecycle, group management, SSO/MFA configuration, application assignments, and access reviews.
• Help run periodic access reviews and collect audit evidence.

Network & security tooling

• Support ZScaler operations, policy review, bypass requests, log analysis, and user troubleshooting.
• Help maintain DLP policies and triage alerts for potential data exfiltration.
• Assist with WAF rule review, false-positive tuning, and traffic analysis (AWS WAFv2 / Akamai).
• Support SIEM operations in Splunk/Wazuh by querying logs, building dashboards, and tuning alerts.

Scripting & automation

• Write and maintain scripts to automate repetitive IT/Security tasks - log analysis, evidence collection, ticket enrichment, account hygiene, and reporting.
• Build small tools that make the team faster (no full-stack development required).
• Contribute to and use AI/agentic workflows the team has built (MCP servers, Claude-based runbooks) to accelerate investigations.

Requirements

• Bachelor's Degree in Cybersecurity, Information Technology, Computer Science, Information Assurance, IT Management, or a related field.
• Scripting in Python or Bash is required. You can independently write, read, and debug working scripts to automate IT/Security tasks — parsing logs, calling APIs, generating reports, cleaning up accounts. 
• Working knowledge of the Linux command line: file system navigation, permissions, process management, and log inspection (grep, awk, sed, tail, journalctl).
• Comfort with macOS as a daily-driver OS and ability to troubleshoot common Mac issues.
• Solid IT troubleshooting fundamentals across hardware, software, and OS (Mac, Windows, Linux).
• Networking fundamentals: DNS, DHCP, VPN, TLS, and the ability to diagnose connectivity issues methodically.
• Understanding of authentication and identity concepts: SSO, SAML, OAuth/OIDC, MFA, and user lifecycle/group management in an IdP (Okta or equivalent).
• Working proficiency with Git, GitHub, and the terminal — you can clone a repo, branch, commit, and open a PR.
• Ability to read and interpret logs to answer a question or trace an issue (system logs, application logs, or SIEM output).
• Actively follows trends in IT, cybersecurity, and AI, with a strong desire to experiment with new tools.
• Strong written communication; you can document what you did so others can use it.
• Must reside in the U.S.

Nice to have

• Hands-on exposure to any of: Okta, ZScaler, Jamf/Kandji/Intune, CrowdStrike/SentinelOne, Splunk, Wazuh, AWS, GCP - academic labs, home labs, and personal projects all count.
• Familiarity with DLP concepts (data classification, exfiltration channels, false positives).
• Familiarity with WAF concepts (OWASP Top 10, rule tuning, rate limiting).
• Experience with SIEM querying (Splunk SPL, Wazuh rules, Sigma) or log analysis.
• Exposure to compliance frameworks (SOC 2, HIPAA, NIST CSF, ISO 27001).
• Experience with LLMs, agents, MCP servers, or prompt engineering through projects, hackathons, or coursework.
• SQL skills for querying data (Postgres, Redshift, BigQuery).
• Participation in CTFs, TryHackMe, HackTheBox, or similar.
• A public GitHub portfolio with scripts, automations, or write-ups.
• Interest in healthcare technology or working in a regulated environment.

Benefits

• Medical, Dental, and Vision Coverage: Comprehensive plans with options for low-to-no-cost premiums.
• Employer HSA Contribution: Company-funded contributions to your Health Savings Account.
• 401(k) Retirement Plan
• Equity Incentive Plan
• Annual Company-Wide Bonus: Opportunity for up to 15% bonus based on company performance.
• Remote-First Culture: We are remote-first with a dedicated NYC office and reimbursement options for co-working spaces.
• Flexible Vacation Policy
• Summer Fridays: 5 additional Fridays off during the summer (separate from PTO).
• Home Office and Wellness Stipend
• Monthly Internet Stipend
• Annual Learning and Development Stipend

Base Salary Band (based on experience and level)

$60,000 - $105,000