IT and Security Generalist

Accountabilities:: Administer identity systems, including users, groups, applications, and device trust, while managing the macOS device fleet through the organization’s MDM platform. Monitor and refine automated employee onboarding and offboarding workflows, investigate exceptions, and maintain reliable lifecycle processes. Maintain and extend automation supporting lifecycle management, security monitoring, reporting, and LLM-assisted triage workflows. Build automation for recurring manual processes, monitor workflows after deployment, troubleshoot failures, and retire solutions that are no longer needed. Respond to security alerts from endpoint, cloud, and identity systems within defined SLAs; investigate and document security events and escalate incidents according to established procedures. Support vulnerability management by reviewing findings, coordinating remediation with engineering teams, and reporting progress. Participate in application security reviews covering engineering changes, integrations, authentication, authorization, and data-handling practices, helping establish secure defaults early in the development process. Maintain automated audit evidence collection and investigate gaps, while preparing additional evidence for SOC 2 and HITRUST assessments when required. Provide workforce support for access or system issues that require human judgment beyond automated helpdesk processes, and create clear end-user documentation. Document decisions, changes, and status updates; test changes before production deployment and continuously improve operational processes. Requirements 4–5 years of experience in fast-moving IT, security operations, systems administration, or equivalent demonstrated experience. Working knowledge of identity and access management platforms such as Okta, along with practical macOS administration experience. Some scripting experience and a solid understanding of scripting fundamentals, with exposure to or strong interest in workflow automation tools, APIs, LLMs, and GenAI. Familiarity with core security concepts including authentication, least privilege, logging, security monitoring, and incident response. Clear and concise written communication, with the ability to explain problems, decisions, and status updates effectively. Strong ownership and accountability, including monitoring systems, addressing issues promptly, and ensuring that solutions remain reliable after deployment. Good judgment about when to act independently and when to seek guidance, with a proactive approach to communicating blockers and discussing important decisions. Exposure to HIPAA, SOC 2, or HITRUST environments is a plus. Experience with AWS or GCP administration, EDR, SIEM, or cloud security monitoring tools is desirable. A completed or in-progress security certification is also advantageous. Benefits Annual compensation of $110,000–$120,000 , based on prior experience, performance, and market factors. Eligibility for a 10% annual bonus . Medical, dental, and vision insurance. Flexible Spending Account (FSA). Health Savings Account (HSA) with employer match. Company-paid short-term and long-term disability, AD&D, and life insurance. Paid family leave. 401(k) with employer match. Paid time off. Full-time remote work within the United States. Broad exposure across IT, automation, security operations, and application security, with a defined development path toward a Security Engineer role.