IT Operations Engineer

AgentSync started in 2018 with one conviction: compliance shouldn't be this hard. It should enable it. We're a venture-backed, category-defining SaaS company headquartered in Denver, backed by investors including Craft Ventures, Valor Equity Partners, and Marc Benioff. Our culture runs on four values: customer love, inspire excellence, always be curious, and act like an owner — meaning no ego, no politics, and real ownership over your work.

About the role

As an IT Operations Engineer, you will own the identity, endpoint, and SaaS infrastructure that every AgentSync employee depends on to do their best work. You will help scale our IT Operations practice in a fast-moving startup environment — replacing manual, ticket-driven work with automation, standing up durable access and device management foundations, and defining the metrics that tell us whether IT is healthy. You’ll take projects from loose problem statements to production, partner closely with Engineering, Security, and the business, and set the standard for what great internal support looks like.

Responsibilities

• Own and mature our identity provider (Okta) — SSO/SAML/OIDC integrations, SCIM provisioning, lifecycle management, and least-privilege RBAC across our SaaS estate
• Build the IAM and RBAC foundations that let us grow: consistent access models, automated joiner/mover/leaver workflows, and access reviews that hold up under audit
• Design and scale our macOS endpoint program in JAMF — zero-touch provisioning, patching, configuration profiles, and compliance baselines — with a clear roadmap toward MDM maturity
• Automate manual IT workflows with scripting and integrations so that onboarding, offboarding, and access requests are repeatable rather than tribal knowledge
• Define and report the KPIs that measure IT Operations effectiveness — response and resolution times, provisioning cycle time, patch and MDM compliance, and license utilization — and use them to drive investment decisions
• Lead IT projects end to end with loose or evolving requirements: frame the problem, plan the phases, sequence the work, communicate timelines, and deliver
• Prioritize a heavy queue of competing requests and incidents without losing the thread on long-term project work
• Partner with Security and Compliance to support SOC 2 evidence collection, access reviews, and audit readiness
• Troubleshoot escalated issues across identity, networking, endpoints, and SaaS applications — including the ones nobody has documented yet
• Support employees with genuine customer love, managing frustration with patience while getting to the real fix and preventing the repeat
• Administer and improve our ticketing and collaboration platforms so requests are routed, tracked, and measured rather than lost in DMs
• Regularly bridge the gap between IT and Engineering, Security, and business teams as a champion of cross-team collaboration
• Provision and manage employee hardware
• Participate in helping to build and maintain a culture of IT and engineering best practices

Requirements

• Significant hands-on experience in IT Operations or IT Engineering, ideally at a startup or other high-growth, fast-changing environment
• Deep experience administering an identity provider and access permissions at scale (Okta strongly preferred), including SAML, SSO, OIDC, and automated provisioning
• Strong macOS fleet management experience with an MDM (Jamf preferred), and a clear point of view on what a mature MDM solution looks like and how to get there
• Working knowledge of AWS, including cloud identity and access management
• Solid Linux fundamentals and networking knowledge — comfortable reasoning through the OSI model when troubleshooting
• Scripting and automation experience (Python, Bash) paired with an automation-first mindset
• Familiarity with security and compliance frameworks (SOC 2) and how IT controls support them
• Experience administering ticketing and collaboration platforms and improving the workflows that run on them
• A track record of leading projects without being handed direction, and of executing from scratch in ambiguous situations
• Experience mentoring, leading, or otherwise growing the people around you
• The desire to work on a collaborative, learning-oriented team
• Strong verbal and written communication skills, with the ability to explain identity, access, and endpoint concepts to non-technical audiences
• A scrappy, roll-up-your-sleeves mentality — you thrive with ambiguity and ownership

Location

Our ideal candidate will live within 25 miles of our office in Denver. Other states we're able to consider candidates in: CA, CO, CT, GA, IL, IN, KS, MA, MD, MI, MN, MO, NC, NY, OR, TN, TX, UT, and WA. We are not hiring or able to consider candidates in New York metro, Seattle metro, or Bay Area.

Pay

$100K–$115K base salary, plus annual company bonus program and equity in the form of stock options.

Benefits

• Health Benefits
  • Medical: Multiple Cigna plans to choose from, with up to 80% employer-paid premiums for you and your dependents
  • Dental: Multiple Cigna plans with up to 80% employer-paid premiums for you and your dependents
  • Vision: 80% paid premium plan for you and your dependents
  • Employee Assistance Plan, Life & AD&D Insurance
• Financial Benefits
  • 401(k) retirement savings plan
  • HSA employer contributions
• Other Benefits
  • Flexible PTO
  • 12 paid holidays per year
  • 12 weeks parental leave with a generous return-to-work stipend