Staff Engineer - IT & Security

Security & Compliance

• Implement and maintain IT and security policies aligned with

  SOC2, HIPAA, GDPR, and AI ACT

  .

• Manage

  identity and access management (IAM)

  using zero-trust principles and MFA enforcement.

• Design and maintain

  backup and disaster recovery

  systems.

• Monitor cyber threats and respond to security incidents.

• Support

  application security initiatives (SAST, DAST, IAST)

  and automate security testing pipelines.

• Establish and maintain best practices for

  secrets management, RBAC/ABAC, and safe defaults

  .

IT Infrastructure & Cloud Operations

• Maintain and optimize JazzX s cloud environments across

  Azure, AWS, GCP, and Okta

  .

• Configure and monitor integrations across cloud and SaaS services.

• Manage hardware, software, and device fleets (primarily Macs and mobile devices).

• Ensure infrastructure reliability, scalability, and security through proactive monitoring and automation.

• Govern JazzX s internal tools and licenses (e.g., Notion, PagerDuty, Lucid, Cursor, Figma, etc.).

IT Operations & User Support

• Provide direct technical support and troubleshooting for employees.

• Handle onboarding and offboarding, ensuring secure and timely access provisioning/removal.

• Enhance IT operations by implementing efficient workflows, scripts, and documentation.

• Improve employee experience by automating common IT tasks and access requests.

Process & Tooling

• Maintain IT documentation, playbooks, and standard operating procedures.

• Evaluate and deploy new IT tools to improve automation, security, and reliability.

• Collaborate cross-functional engineering and compliance teams to align infrastructure and security practices.

Key Projects

• Migrate O365 mailboxes, SharePoint, and Teams from the SAI Group tenant.

• Transition of the Mac fleet from Addigy to JAMF.

• Integrate all internal apps under

  Okta Lifecycle Management (LCM)

  .

• Implement granular access controls across

  Azure, AWS, GCP, and Okta

  .

• Design and operationalize

  disaster recovery

  processes.

Qualifications

• 10+ years of hands-on experience in

  IT infrastructure, operations, and security engineering

  .

• Strong technical expertise in

  Okta, JAMF, O365, Azure, AWS, GCP

  , and device management.

• Certifications preferred:

  CISSP, CISM, ITIL 4 Foundation, CCSP

  .

• Familiarity with compliance frameworks (

  SOC2, HIPAA, GDPR

  ) and audit readiness.

• Solid understanding of

  IAM, zero-trust security models, and cloud security architecture

  .

• Excellent troubleshooting, scripting, and documentation skills.

• Experience evaluating and deploying IT tools or automation frameworks.