> Markdown version of [/jobs/ext/4259961-lead-it-engineer](https://www.wearedevelopers.com/jobs/ext/4259961-lead-it-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Lead IT Engineer - **Company:** LATER, LLC - **Location:** Boston, MA, United States (Remote available) - **Experience:** Expert - **Salary:** $140,000.0 - $170,000.0 - **Contract:** Permanent contract - **Skills:** Microsoft Access, Microsoft Windows, Artificial Intelligence, Systems Engineering, Bash Shell, Software as a Service, Information Systems, DevOps, Identity and Access Management, Python (Programming Language), Local Security Policy, Windows PowerShell, Security Assertion Markup Language (SAML), Software Asset Management, Scripting, Okta, Microsoft InTune, Information Technology, Gsuite - **Published:** October 31, 2026 - **Apply:** https://www.careerbuilder.com/job-details/lead-it-engineer-boston-ma--4d882c98-30aa-490c-9158-fa35dbf1eea1 ## About the Role Technical Leadership, Campaigns, Marketing, Artificial Intelligence (AI), Technical Leadership, Information Technology & Information Systems, Software as a Service (SaaS), Onboarding, ISO (International Organization for Standardization), Technical Support, * 7+ years in IT engineering, systems administration, or corporate systems leadership (senior technical depth). * An automation-first mindset backed by practical scripting skills (Python, PowerShell, or Bash). You have a proven track record of turning repetitive IT processes into dependable automations, and you can safely read and modify someone else's script. * Deep expertise in Google Workspace administration and security controls. * Strong experience with SSO/SAML and SCIM (Okta or similar IdP), group-based access models, and least-privilege design. * Strong endpoint management experience: Kandji (Mac) and/or Intune (Windows), patching, encryption, AV, compliance reporting. * Comfort operating in a compliance-driven environment (SOC 2 / ISO), including evidence, audits, and operational controls. * Strong documentation habits and a "make it repeatable" mindset. * Calm, practical, senior ownership: you can run the work, prioritize, push back, and build scalable patterns. Nice to have * Experience with SaaS management platforms or SaaS operations automation tooling * Vendor risk management inputs and software governance experience * Experience rolling out Okta/device trust policies or conditional access * Experience building IT dashboards and metrics (SLA, compliance, lifecycle time) * Experience with auditing mechanisms and processes (SOC 2, ISO 27001) How you work * Driven by Impact: You deliver results that matter-prioritizing high-value work, meeting deadlines, and adapting quickly while keeping outcomes clear. * Strategic & Customer-Centric: You anticipate risks and opportunities, connect decisions to long-term growth, and build trust through proactive insights. * Curious & Growth-Oriented: You seek knowledge, ask sharp questions, and apply learnings fast-challenging the status quo with a mindset of improvement. * Collaborative & Resilient: You thrive in change by staying resourceful, solution-focused, and positive-removing roadblocks, sharing insights, and keeping morale high. * Accountable & Honest: You own your work, hold yourself and others to a high bar, and use transparent feedback to drive growth. * Emotionally Intelligent: You build trust through empathy and collaboration, foster inclusion, and inspire others with grit, optimism, and integrity. ## Description We're looking for a highly technical Lead IT Engineer to own and evolve our corporate IT systems, access, and security at a senior level. This is not a "tickets all day" role. It's a deeply technical position that stays close to both planning and execution. You'll build secure, well-configured, and well-governed systems and third-party integrations across identity/access, endpoint management, device compliance, and core productivity platforms (Google Workspace and key SaaS). You will be the technical owner of the IT foundations that support SOC 2/ISO readiness, secure access, reliable onboarding/offboarding, and device compliance across a growing organization. We want someone who builds automation instead of doing the work by hand. What you'll be doing Strategy * Participate in and advise on the IT technical roadmap across identity, endpoint security, access governance, and core corporate systems. * Partner with Security/Infra to ensure SOC 2 Type II and ISO 27001 controls are operational (and not just documented). * Establish standards for device compliance, access management, and SaaS lifecycle (intake review onboarding offboarding). * Drive adoption of scalable patterns: SSO-first, least privilege, automated lifecycle management, and measurable compliance. * Govern IT equipment in company offices (conference room equipment, entrance doors, security cameras, etc.). Technical / Execution * Own Google Workspace administration end-to-end (org policies, groups, security settings, audits, access hygiene). * Lead Identity & Access Management: SSO/SAML, SCIM provisioning, group-based access control, and app access patterns. * Own endpoint management at scale: + Kandji/Iru (Mac) and Intune (Windows) device policy enforcement + OS update compliance, encryption, malware protection, and reporting * Build and maintain operational automation: + Script-driven and platform-based workflows (Python, PowerShell, Bash, and SaaS management platforms) for onboarding/offboarding, group membership, and access reviews + Automation by default: identify repetitive manual work and replace it with reliable, documented, version-controlled automations * Own core "security hygiene" within IT: + Account lifecycle and joiner/mover/leaver processes + Device inventory accuracy and compliance dashboards + Audit evidence collection that's clean and repeatable * Support vendor/tool governance: + Software inventory ownership (admin + business owner) + Vendor classification and risk review inputs (in partnership with Security/Legal) Team / Collaboration * Partner with Infra/DevOps/Security to align on controls, identity design, and incident readiness. * Work with HR/PeopleOps on onboarding/offboarding and policy rollout. * Collaborate with Finance/Procurement on renewals, licensing discipline, and cost visibility. * Create clear documentation and runbooks so IT is easier to operate and scale. Research / Best Practices * Define "how we work" standards: SLA tiers, escalation rules, evidence cadence, and system ownership. * Reduce repeat incidents through automation, standardization, and root-cause improvements. * Build a monthly operating rhythm: access reviews, device compliance review, vendor/tool audits, and reporting. What success looks like First 30 days: Meet key stakeholders (IT, Security, DevOps, HR, Finance). Take ownership of IT intake: ticket flow, SLA usage, escalations, and current pain points. Audit Google Workspace, groups, SSO apps, device inventory (Mac/Windows), and current policies, including any existing scripts and automations. Review SOC 2/ISO requirements that touch IT (access, device compliance, evidence). Identify quick wins: clean up high-risk access, fix top recurring tickets, and document "how-to" basics for the team. First 60 days: Stabilize operations: reduce ticket backlog, tighten prioritization, and improve response consistency. Implement a clear, largely automated onboarding/offboarding workflow (Google Workspace + SSO + device provisioning) and standardize access requests. Roll out baseline endpoint compliance reporting (Kandji/Intune) for patching, encryption, and AV. Build a vendor/software inventory with owners and admin contacts. Start monthly access reviews and an evidence collection cadence for SOC 2 (and prep for Type II). First 90 days: Deliver measurable improvements: faster onboarding, fewer repeat tickets, and higher endpoint compliance (patching/encryption/AV). Lock down SSO standards: app catalog, ownership, least-privilege groups, and (where possible) SCIM automation. Ship your first set of production automations for your highest-volume manual tasks, with documentation. Formalize IT runbooks and a small project roadmap (next quarter). Ensure SOC 2/ISO readiness is "operational," not ad hoc: recurring evidence, vendor reviews, and audit-ready documentation. Present a clear plan for future capacity needs (contractor vs. hire) based on volume and risk.