IT Security & Identity Operations Specialist

Insight Global is looking for a hands-on security contractor who can sit next to a two-person IT team and take identity, endpoint, SaaS access, and AI-tooling risk off their plate. This is not a CISO-only advisory seat and not a red-team SOW. You will work tickets, close control gaps, and leave Okta / Kandji / GitHub cleaner than you found them.

The day-to-day

• Own Okta: app assignments, groups, MFA, joiner-mover-leaver, periodic access reviews.
• Own Kandji / Apple endpoint hygiene: FileVault, updates, compliance, new-hire and offboard devices.
• Tighten SaaS and admin access (Google, Slack, Atlassian, GitHub, Navan, Adobe, Cursor, Claude). Least privilege, not more licenses.
• Turn #help-it and Jira Service Desk security-adjacent tickets into durable fixes.
• Shadow-AI inventory: which copilots and extensions are sanctioned, where company data is going, what to lock down first. DLP and DEX policy experience.
• Partner with Infra on the IT-owned slice (VPN/Okta, admin SaaS, laptop trust). You are not the EKS/Terraform owner.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to HR@insightglobal.com.To learn more about how we collect, keep, and process your private information, please review Insight Global’s Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/.

Must-haves

• 5+ years in IT security, identity, or security-minded IT ops at a tech company.
• Production Okta (or Entra) and an MDM (Kandji (Iru), Jamf, or Intune). Apple fleet experience.
• You have done access reviews and offboarding, not only written a policy.
• Comfortable in Slack-first, ticket-first support. You close the loop with the requester.
• Can be in San Francisco for hardware, white-glove, and live troubleshooting. Nice-to-haves
• GitHub org admin, Atlassian admin, Kandji specifically.
• Prior work on AI / copilot acceptable-use or DLP.