About the Role
Second Front Systems (2F) is seeking an IT Engineer to help build, automate, and scale the internal technology ecosystem that powers our mission. As an IT Engineer, you will own and evolve the identity, endpoint, and business systems that support our remote-first workforce. You'll partner closely with Security, Engineering, and People Operations to deliver a seamless employee technology experience while ensuring our internal infrastructure remains secure, compliant, and scalable.
What You'll Do:
- Own identity and access management across core enterprise platforms, including Okta and Google Workspace, administering user lifecycle management, Single Sign-On (SSO), Multi-Factor Authentication (MFA), and role-based access controls.
- Lead endpoint management for company devices, primarily macOS systems managed through Jamf, developing secure endpoint baselines, software deployment workflows, and lifecycle management processes.
- Design and build automation using APIs and scripting languages such as Python, Bash, or PowerShell to streamline IT operations, eliminate repetitive tasks, and improve operational efficiency.
- Administer and support business-critical SaaS applications and collaboration platforms, ensuring secure, reliable, and scalable services that enable employees to work effectively.
- Partner closely with Security to support access reviews, vulnerability remediation, asset management, and compliance initiatives across frameworks including FedRAMP, SOC 2, ISO 27001, and CMMC.
- Serve as the senior escalation point for complex employee technology issues, major incidents, and advanced troubleshooting across identity, endpoint, and SaaS platforms.
- Continuously improve IT operations through process optimization, documentation, self-service capabilities, and scalable infrastructure that supports company growth.
Skills You'll Bring to Our Team:
- 3–5+ years of experience in IT Engineering, Systems Administration, Enterprise IT, or a related technical discipline supporting cloud-first organizations.
- Hands-on experience administering identity platforms such as Okta and Google Workspace, with strong knowledge of identity lifecycle management, authentication, and enterprise access controls.
- Experience managing Apple device fleets using Jamf, including device provisioning, endpoint security, software deployment, and lifecycle management.
- Proficiency developing automation through scripting languages such as Python, Bash, or PowerShell, along with experience leveraging APIs and workflow automation tools.
- Strong understanding of SaaS administration, endpoint management, enterprise productivity platforms, and modern cloud-based IT infrastructure.
Preferred Qualifications:
- Experience working in high-growth startups or rapidly scaling technology organizations.
- Familiarity with security and compliance frameworks such as FedRAMP, SOC 2, ISO 27001, and CMMC.
- Relevant certifications such as Okta Certified Professional, Jamf Certified Tech, Google Workspace Administrator, or Security+.