[Hiring] IT Administrator @Statusphere Inc

Role Description

As our first dedicated IT hire, you'll be the go-to person for how our team gets equipped, stays secure, and gets unblocked. IT is currently run by our VP of Engineering in addition to their core responsibilities. You'll take ownership of it and turn ad-hoc work into documented, repeatable, automated systems, reporting initially to our VP of Engineering, and transitioning to our SVP of Engineering & Technology once that role is in place. You'll partner closely with HR, Finance, Operations, and Engineering, and you'll help shape how IT scales as we grow. You thrive in a startup environment, enjoy building process where none exists, and take pride in making technology just work for the people around you.

What You'll Do:

• IT & Technical Support: Provide day-to-day IT support across the organization, troubleshooting hardware, software, account, and connectivity issues directly, escalating to Engineering or leadership when needed, while building a simple ticketing and knowledge base process that keeps support scalable.
• IT strategy and roadmap: Assess our current IT and security posture, maintain a lightweight 6–12 month IT roadmap, and own tooling recommendations and the IT budget in partnership with Engineering leadership and the COO/CFO.
• Device management (MDM): Own and configure our MDM platform (Iru, formerly Kandji), including enrollment, configuration profiles, patching, app deployment, and compliance policies. Confirm the size of our Windows footprint (including company-issued machines used by contractors) and, if warranted, define a lightweight baseline for those devices (approved software, encryption, patching). Recommend, with Engineering leadership, an approach for personal devices that access company data (for example, a BYOD policy and conditional access through Google Workspace and SSO rather than full MDM).
• Identity and access management: Administer SSO and enforce MFA. Manage our password manager, 1Password, and run periodic access reviews so everyone has the access they need and nothing more. Production AWS and application-level access remain owned by Engineering; this role supports provisioning, where needed, and the review process.
• Scaling through automation and policy: Find repetitive work and automate it where the time savings are clear using tools like n8n, Google Workspace admin tooling, and MDM workflows. Draft and maintain IT policies such as acceptable use, device standards, personal device use, and access management.
• Security awareness: Run phishing and security awareness training, using KnowBe4. Help employees understand and follow IT policies, including what software is and isn't permitted on company devices.
• Incident response: Act as first responder when an endpoint or user account is compromised, handling quarantine, initial investigation, and documentation, following the incident management framework owned by Engineering leadership.
• Documentation and standard processes: Build and maintain runbooks, a knowledge base, and standard operating procedures so IT knowledge doesn't live in one person's head.
• Onboarding and offboarding: Run the full employee and contractor lifecycle for IT. That means provisioning laptops, accounts, and access on day one, and cleanly recovering devices and revoking access when people leave.
• Remote logistics: Coordinate shipping, setup, repairs, and equipment returns for a distributed team.
• Asset and license management: Maintain an accurate hardware inventory covering assignments, warranties, and refresh cycles. Track SaaS licenses and reclaim unused seats to keep costs in check. Report savings opportunities to the COO/CFO quarterly.
• Data protection: Ensure device encryption (FileVault/BitLocker) is enforced, manage Google Workspace data retention, and own recovery procedures for lost or stolen devices.
• Vendor management: Manage day-to-day relationships with IT vendors (MDM, endpoint protection, hardware suppliers) and evaluate new tools as needs evolve, with purchasing approval through Engineering leadership and the COO/CFO.
• Engineering enablement: Support engineers with laptop standards, tool access (for example GitHub and Workspace), and secure setup for US and international team members, in coordination with the VP of Engineering.
• Cross-functional partnership: Work with HR on onboarding and offboarding timing and on the employee experience. Work with Finance and Operations on purchasing and budget. Keep IT controls (device management, access reviews, training, onboarding/offboarding) documented and evidence-ready to support future compliance efforts, including SOC 2. This role does not own the compliance program.
• Other duties as assigned.

Qualifications

• 3–5+ years in IT support or systems administration, ideally at a startup or SMB.
• Experience as a sole or lead IT person, or building IT processes from the ground up.
• Hands-on experience with an MDM platform (Iru/Kandji, Jamf, Intune, or similar).
• Strong Google Workspace administration skills.
• Experience with SSO, MFA, and identity management tools.
• Comfort supporting both macOS and Windows.
• Experience writing and implementing IT policies (device, access, acceptable use).
• A documentation-first habit: you write things down so others can follow them.
• Scripting or automation experience (Bash, PowerShell, Python, or low-code tools like n8n or Zapier).
• Clear, friendly communication with non-technical coworkers.

Nice to Have

• Experience with SaaS management platforms.
• Hands-on incident response or endpoint investigation experience.
• Exposure to a SOC 2 readiness effort (ISO 27001 or similar a plus).
• Familiarity with AWS or cloud infrastructure basics.

Education

• Associate's degree in Information Technology or a related field, or equivalent practical experience.

What Success Looks Like in Your First 90 Days

• Learn our environment, tools, and current IT processes.
• Take over day-to-day support and onboarding/offboarding.
• Document onboarding and offboarding end-to-end.
• Complete a full hardware and SaaS inventory.
• Confirm the Windows and personal device footprint and propose an approach.
• Publish runbooks for our most common support issues.
• Identify and automate at least two repetitive IT processes.
• Deliver an IT and security gap assessment with prioritized recommendations.
• Present a lightweight 6–12 month IT roadmap to Engineering leadership and the COO/CFO.

Hours and Availability

• Work Schedule: We offer flexibility in scheduling, with a preference for three days per week (Monday, Wednesday, and Friday) or approximately 24–28 hours per week. We are open to discussing alternative schedules based on availability and business needs.
• Most support happens during standard business hours. Occasionally, evening or weekend support may be needed for urgent issues or planned maintenance, but this isn't a regular occurrence.

Travel

• Typically, less than 5%. Primarily remote environment with occasional travel to the company's warehouse for on-site IT support. No special physical demands required.