IT & Security Engineer

This role is approximately 80% security-focused and 20% IT operations, making it an ideal opportunity for a hands-on engineer who excels in security governance, cloud security, compliance, vulnerability management, and enterprise IT administration. The successful candidate will serve as a key stakeholder responsible for maintaining secure systems, enforcing security controls, supporting compliance initiatives, and ensuring a reliable technology environment across a distributed workforce., Security Operations

• Lead and maintain the organization’s security posture in alignment with ISO 27001 and NIST CSF 2.0.
• Manage vulnerability assessments, remediation tracking, and security incident response activities.
• Administer security monitoring tools, HIDS/SIEM platforms, and secrets management solutions.
• Conduct security awareness initiatives, phishing simulations, and end-user training.
• Manage vulnerability disclosure and bug bounty programs., * Secure and administer Google Cloud Platform (GCP) environments, including IAM, logging, and security policies.
• Manage Cloudflare security technologies, including:
• Web Application Firewall (WAF)
• Zero Trust Access
• DNS Security
• API Protection
• Perform cloud and network security assessments and recommend improvements.
• Support Kubernetes security through RBAC, workload reviews, and container hardening best practices.

Identity & Access Management

• Administer Okta and enterprise identity management solutions.
• Manage Single Sign-On (SSO), Multi-Factor Authentication (MFA), and automated provisioning.
• Enforce least-privilege access controls and access lifecycle management.
• Support onboarding, offboarding, and role-based access reviews., * Manage the lifecycle of hardware and software across Windows, macOS, and Linux environments.
• Oversee VPNs, endpoint security, disaster recovery, backups, and MDM platforms.
• Provide advanced technical support and act as the escalation point for complex IT issues.
• Develop and maintain system documentation, standards, and operational procedures.

Asset Management

• Own the organization’s hardware, software, and license inventory.
• Track assets from procurement through deployment, reassignment, and secure disposal.
• Maintain accurate inventory records for budgeting, compliance, and audit purposes.
• Support license audits and technology refresh planning.

Onboarding & Offboarding

• Coordinate all IT aspects of employee onboarding and offboarding.
• Provision systems, devices, and access permissions for new hires.
• Ensure complete and timely deprovisioning upon employee separation.
• Maintain documented and auditable processes for user lifecycle management.

Platforms & Vendor Management

• Administer Google Workspace, Atlassian/Jira, and other critical SaaS platforms.
• Manage vendor relationships, renewals, licensing, and procurement activities.
• Ensure platform configurations adhere to organizational security standards.

Project Management & Cross-Functional Collaboration

• Lead IT and security projects from planning through implementation.
• Partner with Engineering, HR, Finance, Compliance, and Operations teams.
• Support audit readiness, risk assessments, and security reviews.
• Drive continuous improvement initiatives across IT and security functions.

The ideal candidate is a highly autonomous IT and Security professional with strong experience in security operations, cloud security, compliance, identity management, and enterprise infrastructure. They are comfortable balancing strategic security initiatives with hands-on technical administration and can independently lead projects, resolve complex issues, and collaborate effectively across multiple business functions. Experience with Cloudflare, audit preparation, asset management, and modern security frameworks is essential for success in this role, * Cloudflare administration and web security expertise

• Compliance and audit experience, including ISO 27001 and NIST frameworks
• IT asset management experience
• 5+ years of IT Systems Administration and/or Security Engineering experience
• Experience working across Windows, Linux, and macOS environments
• Strong understanding of identity and access management principles
• Excellent communication and documentation skills, * CISSP, CompTIA Security+, Google Professional Cloud Security Engineer, or similar certifications
• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or related field
• Experience with mobile security platforms and mobile device management solutions
• Experience in fast-paced technology or SaaS environments
• Scripting experience with Python or Bash