Senior IT Manager

About the role

Solen Software Group is an evergreen holding company that acquires and operates software businesses with strong fundamentals and long‑term potential. We invest for the long term, empower entrepreneurial teams, and build enduring companies across a growing portfolio of SaaS businesses.

The Senior IT Manager will help mature the IT function across the holding company and more than twenty operating companies. This person will inherit a partially built environment with standards and implementations already underway, uneven documentation, and a mix of internal and external support. The mandate is to make that environment reliable, repeatable, secure, well documented, and capable of scaling with the portfolio. This is a hands‑on builder role.

During the first year, the Senior IT Manager will personally diagnose problems, complete implementations, support users, document recurring work, and learn the true shape of demand. That operating experience will inform recommendations about what Solen should own internally, outsource, or solve through technology. The role may eventually lead a team, but it is not being hired to inherit a mature organization and manage from a distance. The Senior IT Manager will recommend improvements, influence operating companies, and execute agreed direction. Jason retains final authority over consequential cross‑company standards and major IT decisions, while expecting this leader to challenge assumptions, surface risks, and bring better ideas forward.

What Success Looks Like In Year One

• Build a repeatable IT operating foundation.
• Complete and operationalize core identity and access management, device management, remote monitoring, onboarding and offboarding, code repository, cybersecurity, and governance standards.
• Execute the IT components of Solen's 100‑Day Integration Plan consistently for acquired companies.
• Turn knowledge into organizational capability by creating and maintaining practical standards, runbooks, and SOPs for major IT components so another capable IT professional can execute recurring work without rediscovering the process or relying on tribal knowledge.
• Establish practical security and governance: apply controls in proportion to business risk, customer and regulatory obligations, cost, and employee friction (including Data Loss Prevention, incident response, ongoing compliance review, and repeatable vulnerability and penetration testing completed before applicable public announcements or press releases).
• Define the long‑term operating model using hands‑on experience and operating data to recommend which capabilities Solen should build internally, buy, outsource, or reduce through technology, including the capabilities and talent required, the future role of managed services and contractors, vendor and tool consolidation, and centralized optimization of AWS, Azure, and other hosting costs.
• Make IT a trusted business function by delivering responsive, consistent service and sound recommendations so IT enables operating companies rather than becoming a blocker, building credibility through execution, practical judgment, and reliable systems.

Why This Role

This role offers the opportunity to shape how IT operates across a growing software group. The right person will have meaningful autonomy, direct access to leadership, and the chance to build durable systems while helping determine the team and operating model Solen will need for its next stage.

Responsibilities

• Own day‑to‑day IT execution across Solen HQ and the operating companies, including complex identity, access, device, network, application, and endpoint issues.
• Complete and operate standards for Entra ID, Microsoft 365, Intune or similar MDM platforms, endpoint security, remote monitoring and management, patching, device compliance, and SaaS administration.
• Design and run end‑to‑end employee onboarding and offboarding, including hardware procurement and recovery, account provisioning and revocation, licensing, data transfer, and evidence capture.
• Maintain practical identity and access controls including conditional access, phishing‑resistant MFA, SSO, passkeys or self‑service password reset, and least‑privilege administration.
• Implement Data Loss Prevention and other information‑protection controls appropriate to each business's risk and obligations.
• Establish repeatable vulnerability scanning and penetration‑testing processes, including completing applicable testing before public announcements or