IT Director

• Endpoint management: Own the MDM/endpoint solution for our devices
• Identity management: Manage our identity management platform (Okta)
• Security and compliance: Automate evidence collection and monitoring for HIPAA compliance and other clinical security frameworks and regulations
• Secure our code: Set up and maintain security testing in our pipelines (SAST/dependency scanning, secrets detection, and supporting scripts).
• Secure our infrastructure: Ensure our cloud infrastructure follows best practices and is well integrated with our IT platform.
• Stakeholder Collaboration: Partner with software development and clinical operations teams to define technical requirements and resolve interdepartmental issues

We are seeking a skilled and proactive IT professional who can scale our security and infrastructure operations. The core of this role is building on and owning our IT infrastructure, particularly endpoint management, identity, compliance, and securing our internal tools. We are a fully remote clinical research organization that is small but growing. We are on track to have ~100 devices under management; mostly MacOS but some Windows and Chrome OS as well. We are currently using Okta and Google Workspace., * Strong IT/infrastructure background: endpoint management, identity, and day-to-day systems administration.

• Endpoint/MDM deployment experience: for example, Hexnode, Kandji, Jamf, Intune, etc…
• IAM/administration experience: experience with identity management and access control
• HIPAA compliance experience
• Familiarity with security framework compliance: for example, SOC2 or ISO27001 (experience with Drata or a similar GRC platform is ideal)
• Familiarity with security best practices
• Self directed and flexible: we are still a relatively small team, you will be the primary owner on this domain. We need someone who is able to work without much external direction and work on tasks outside of their immediate comfort zone.

Nice-to-haves

• Experience managing a remote IT infrastructure
• Experience with: Mac OS devices, Google Workspace, and Okta
• Comfortable with scripts and configuration: write and maintain scripts (Python/Bash or similar), read Terraform, and work with YAML based configuration.
• Familiarity with Infrastructure as code: for example, Terraform.
• Experience with security tooling in CI/CD pipelines: for example, GitHub Actions, Circle CI, or GitLab (GitHub Actions is ideal)
• Clinical research compliance experience: GCP (Good Clinical Practice), and 21 CFR Part 11

Pulled from the full job description

• Parental leave
• 401(k)
• Health insurance
• Paid time off
• Dental insurance, * 401(k)
• Dental insurance
• Health insurance
• Paid time off
• Parental leave