Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Tailor your resume to this IT Systems Engineer role.
Rezi rewrites your resume against Thatch's job description. Free.
Tailor your resume to this IT Systems Engineer role.
Rezi rewrites your resume against Thatch's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the IT Systems Engineer posting at Thatch — free, in seconds.
Don't guess if your resume is good enough.
See how it scores against the IT Systems Engineer posting at Thatch — free, in seconds.
About the Role
As our IT Ops/Systems Engineer, you'll own the systems and access infrastructure that keeps the company running, including endpoint compliance, identity and access management, and the operational backbone behind security initiatives. This role offers ownership over company-wide compliance, conditional access, and privileged access workflows in a Mac-first environment, with the autonomy to build scalable and secure systems.
Responsibilities
- Own the technology stack including Okta, Iru, Mac, iOS, Android, Rippling MDM/SSO, 1Password, Google Workspace, Microsoft Office, Slack, Zoom, Linear, and Notion
- Drive endpoint fleet compliance to 100% coverage across MDM, EDR, and DLP, and own remediation when devices fall out of compliance
- Administer conditional access policies and own the exception and escalation process
- Own the Privileged Access Management (PAM) workflow, including replacing manual quarterly access reviews with automated processes
- Run trusted device and MFA enrollment, and lead remediation campaigns for weak or breached passwords
- Own the complete employee lifecycle experience from onboarding through offboarding, managing access control, hardware provisioning, and audit-ready documentation
- Vet and administer new SaaS tooling for SSO/IdP compliance as part of vendor onboarding, expose and remediate shadow IT
- Build and maintain a knowledge base that empowers employees to solve common issues independently
- Identify and build automation for repetitive IT and access-management tasks
- Partner with the Head of IT and Security to support company-wide initiatives and maintain our security posture
Requirements
- 4-6 years of hands-on IT support or systems engineering experience in a corporate environment, ideally including some ownership of identity/access infrastructure
- Deep understanding of SSO, 2FA, passkeys, conditional access, and password management systems
- Experience administering or implementing a PAM tool, or a clear grasp of the concepts and willingness to build one from scratch
- Strong knowledge of security principles and best practices with proven ability to implement them at scale
- Excellent follow-through and organizational skills
Skills
- Okta
- Iru
- Mac
- iOS
- Android
- Rippling MDM/SSO
- 1Password
- Google Workspace
- Microsoft Office
- Slack
- Zoom
- Linear
- Notion
- MDM
- EDR
- DLP
- SSO
- 2FA
- Passkeys
- Conditional Access
- Password Management
- Privileged Access Management (PAM)
- MFA
Location
- Fully distributed
Work Type
- Full-time
Experience Level
- 4-6 years
Education Level
- Certification in Network+, Security+, JAMF, Bettercloud, Okta, or comparable credentials
Salary/Compensations
- $145,000—$158,000 USD
About the Company
- We’re a fully distributed early stage company using technology to change the way America does healthcare. We’re a happy, friendly, high-velocity team.