> Markdown version of [/jobs/ext/2383622-it-engineer-ii](https://www.wearedevelopers.com/jobs/ext/2383622-it-engineer-ii). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IT Engineer II - **Company:** TUNNL, LLC - **Location:** United States - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Microsoft Access, Application Integration Architecture, Systems Engineering, Bash Shell, Software as a Service, CompTIA Security+, Cyber Security, Enterprise Content Management, Human Resources Information System (HRIS), Network Topologies, Python (Programming Language), Local Security Policy, Microsoft OneNote, Network Architecture, Network Diagrams, Network Administration, OpenID, Windows PowerShell, Role-Based Access Control, Runbook, Security Assertion Markup Language (SAML), Security Information and Event Management, Data Streaming, Systems Integration, Virtual Local Area Networks, Datadog, Scripting, Slack, Gsuite, Firewall Services Module, Splunk, SentinelOne Expertise, User Administration, Vulnerability Analysis - **Published:** August 3, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=a899e30d4e0f7100 ## About the Role * 4-6 years in an IT engineering or systems administration role in a fast-moving environment. * Google Workspace administration - user management, Drive policies, security settings. * Rippling or comparable HRIS/MDM platform experience, including device management and integrations. * Network administration with Cisco Meraki (switches and/or APs); Sophos XGS or equivalent next-gen firewall. * Endpoint security experience - SentinelOne, CrowdStrike, or similar EDR platforms. * Working knowledge of SCIM, SSO (SAML/OIDC), and identity lifecycle management. * Familiarity with SOC 2 or comparable compliance frameworks and evidence collection. * Ability to document systems clearly - network diagrams, runbooks, integration specs. * Scripting or automation experience (Python, Bash, and PowerShell) for workflow tasks Preferred Qualifications * Relevant certifications: Google Workspace Admin, CompTIA Security+, Meraki ECMS, CCNA, CCNP, or equivalent. * SIEM or log aggregation experience (Splunk, Datadog, or similar). ## Description * Own provisioning, deprovisioning, licensing, and access control across Tunnl's SaaS portfolio - Google Workspace, Slack, Zoom, Notion, and others. * Enforce least-privilege and RBAC standards; manage vendor relationships and escalations. * Monitor application health, usage, and license efficiency. Integrations & Automation * Build and maintain integrations between SaaS platforms and Rippling, including SCIM provisioning, SSO, and workflow automation. * Identify and deploy configuration profiles and MDM policies to enforce IT and Security policy * Identify and automate manual processes; document all integration architecture and data flows. * Troubleshoot sync errors, auth failures, and integration breaks across connected systems. Network Infrastructure * Monitor, configure, and maintain Cisco Meraki switching/wireless and Sophos XGS firewall infrastructure. * Manage VLANs, firewall rules, access policies, and traffic segmentation; coordinate ISP circuit management and upgrades. * Maintain current network topology documentation; follow change management procedures for all modifications. Security Operations * Triage and remediate security alerts from SentinelOne; perform vulnerability assessments across endpoints, apps, and network. * Maintain Rippling MDM policies for endpoint compliance, configuration profiles, and patching. * Contribute to security policy development and stay current on emerging threats relevant to Tunnl's environment. * Function as "End of Tier" support for IT issues. SOC 2 & Audit Support * Partner with Security and external auditors to support SOC 2 Type II - evidence collection, control documentation, and access reviews. * Maintain audit-ready records across access logs, change logs, and configuration baselines; respond to auditor requests directly. ## Related Videos - [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture) - [Stack Overflow: Community and AI](https://www.wearedevelopers.com/videos/600-stack-overflow-community-and-ai) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Agentic employees in world's most downloaded FinTech app](https://www.wearedevelopers.com/videos/100123-agentic-employees-in-world-s-most-downloaded-fintech-app) - [Leading Through Stagility: Human Capital Trends That Redefine Work](https://www.wearedevelopers.com/videos/1717-leading-through-stagility-human-capital-trends-that-redefine-work) - [Hacking MSSQL on Cloud. All of them. How I became sysadmin on Azure, AWS, GCP and Alibaba.](https://www.wearedevelopers.com/videos/100339-hacking-mssql-on-cloud-all-of-them-how-i-became-sysadmin-on-azure-aws-gcp-and-alibaba) ## Related Articles - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence)