IT Operations Engineer

What We're Looking For
Primarily, you like to make great things with passionate colleagues. You are someone that likes to own outcomes, not only inputs. You're motivated by having responsibility and accountability. You're eager to 'do the work,' big and small.

This role suits someone who has run IT at a startup, likes automating repetitive work away, and wants real ownership rather than a ticket queue.

What You'll Do
As our IT Operations Engineer, you'll own corporate IT end to end: identity, devices, SaaS, and the employee lifecycle from first day to last. You'll own how Roboflowers get set up, stay productive, and get offboarded cleanly.

We serve some of the world's largest enterprise companies like Rivian, Pella, Chobani and BNSF, so smooth and secure IT is a shared priority across the company. You'll be the second member of our IT and security function, working alongside our first Security & Automation Engineer as part of our Infrastructure organization. They'll own the security program and audits, and you support it with the day-to-day controls and evidence.

Skillset
Required:

3-5 years in IT operations or systems administration, including at least 1-2 years at a startup or small, fast-moving team

Hands-on admin experience with Okta or a similar SSO provider (Microsoft Entra ID, OneLogin, JumpCloud)

Proven macOS fleet management with an MDM (Kandji, Mosyle, Jamf, Intune, or similar)

Google Workspace administration

Scripting ability (Python, Bash, or similar) and a habit of automating repeated tasks

Clear written communication; you document as you go

Nice to have:

Supported a SOC 2, HIPAA, or ISO 27001 audit, or used a compliance platform like Secureframe, Vanta, or Drata

Okta Workflows or other no-code automation tools

Linux familiarity and basic GCP or AWS IAM

Experience supporting a remote team across time zones

What this role is not:

Not Windows administration: we run macOS and Linux

Not traditional enterprise networking: we're cloud-first with minimal on-prem infrastructure beyond our office hubs

A Glimpse of Your Work
Identity and access:

Administer Okta (or our SSO provider): app integrations, groups, provisioning and deprovisioning, and MFA policy

Run access requests and periodic access reviews across Google Workspace, Slack, GitHub, GCP, and our other SaaS tools

Devices:

Own our macOS fleet through MDM: enrollment, configuration profiles, OS and app patching, and encryption

Handle laptop procurement, shipping, inventory, and recovery for a distributed team across the US and Europe

Employee lifecycle and support:

Own onboarding and offboarding end to end, so new hires are productive on day one and departures are fully closed out the same day

Be the go-to person for hardware, software, and account issues, and turn recurring questions into docs or self-serve fixes

Support office IT (Wi-Fi, conference rooms, printers) at our New York and San Francisco hubs

Automation:

Script and automate repetitive IT work (for example, onboarding workflows, provisioning, and device compliance checks) using tools like Python, shell scripts, Okta Workflows, or HRIS integrations

Keep IT procedures, runbooks, and the asset inventory current

SaaS and vendors:

Manage the SaaS stack: licenses, renewals, spend, and removing unused seats

Evaluate new tools and vendors with the Security & Automation Engineer

Security and compliance support:

Keep IT controls healthy day to day (device compliance, access reviews, offboarding checks) and follow up on exceptions

Collect and organize audit evidence for SOC 2 Type 2, HIPAA, and future frameworks

Help roll out security awareness training and phishing simulations