IT Operations Engineer

This person will report into our Head of IT and work closely with Engineering, People Team, and other cross-functional partners. You’ll be the second person on the IT team at Nourish, owning day-to-day IT operations across our device fleet, identity stack, and SaaS ecosystem. This isn’t a greenfield role - there’s a strong foundation in place. What we need is someone to take ownership of it, improve it, and scale it as we grow from 350 to 800+ employees., * Be the primary owner of IT support: triage, resolve, and close the loop quickly, then eliminate repeat requests through automation or process improvements

• Own onboarding and offboarding end-to-end for employees and contractors
• Manage device lifecycle: procurement and logistics with our hardware partner enrollment and MDM in Iru (Mac) and Intune (Windows)
• Administer Okta (SSO, SCIM, group rules), Google Workspace, Slack, and a broad SaaS stack
• Build automations that cut IT toil using Okta Workflows and our IT automation and AI help desk tooling, so access requests and lifecycle events run without manual work
• Keep identity data clean in partnership with People Ops (ADP attributes drive downstream access)
• Provide support for our NYC and SF offices, including networking (UniFi) and conference rooms
• Write documentation and KB articles that enable self-service
• Support SOC 2 and HITRUST controls you own, as well as periodic access reviews

• You have 3-6 years of IT operations or systems administration experience, including time as one of the first IT hires at a high-growth startup
• You’ve administered Okta hands-on in production, including SSO and SCIM app integrations, group rules, and HRIS-driven lifecycle
• You’ve administered at least one MDM platform (Iru/Kandji, Jamf, or Intune). We’re predominantly Mac with a small Windows fleet
• You’ve carried a high-volume support queue on a small IT team, enjoyed it, and still shipped improvements while doing it
• You default to automation: when you encounter a manual process, your instinct is to eliminate it, not just document it
• You own problems end-to-end, from the first Slack ping to root cause, resolution, and follow-up
• You don’t shy away from ambiguity or missing processes and take the initiate to improve or stand up processes
• You’re comfortable supporting people remotely or in person
• You communicate clearly in writing and can translate technical context for non-technical stakeholders
• You’re detail-oriented enough for compliance and audit work, and pragmatic enough to prioritize ruthlessly when everything feels urgent

Bonus points if you have:

• Experience with AI help desk or IT automation platforms
• Endpoint security experience (CrowdStrike preferred)
• Networking or office IT fundamentals (UniFi, Meraki, conference room AV)
• Prior experience at a HIPAA-regulated or healthcare company

This role is full-time and open to NYC, SF, or remote candidates. If based near our NYC or SF offices, there may be the occasional need to work in office.