Sr. Director of IT

ARMRA® was born from a near-fatal health crisis that forced its Founder & CEO, Dr. Sarah Rahal, to uncover what modern life has stolen. As a pediatric neurologist, she turned to exhaustive research and ancient wisdom to find a solution—not just for herself, but for the growing health crisis affecting us all. Your body isn’t broken—it’s brilliantly designed for strength, resilience, and vitality. But the modern world scrambles the signal, disconnecting you from the intelligence encoded within. ARMRA Colostrum™ is nature’s original blueprint with 400+ bioactive nutrients that restore what modern life strips away. It works at the cellular level to remind your body of its original code and reawaken its innate intelligence—so you can reclaim your birthright to thrive.

About the Role

We're looking for a Senior Director of IT to own ARMRA's entire technology function—strategy, security, systems, and support—for a fully remote, multi-state organization. This is a build role, not a maintain role. You'll set the IT roadmap, own the budget and vendor relationships, and make the architectural decisions that determine how a fast-scaling CPG brand operates. You'll also close the help-desk ticket when someone can't get into Okta. Read that last part carefully. You will be a team of one. Additional headcount will be evaluated against business need, not assumed. The right person is energized by that range—comfortable presenting a security roadmap to the executive team in the morning and provisioning a MacBook in the afternoon. If you've spent the last five years managing managers and haven't touched a terminal, this isn't the right fit, and we'd rather say that up front.

Who We Are

• Builders, not passengers – We take ownership, thrive on momentum, and embrace challenges.
• Resilient and resourceful – We find a way forward, even when the answer isn’t obvious.
• Mission-driven – We believe in what we’re building and are passionate about making an impact.
• Direct and constructive – Feedback is a gift, and we embrace it in order to grow.

Who We Are Not

• Performative – We don’t play games, manipulate optics, or curate an image for external approval.
• Entitled – We don’t expect rewards without contribution.
• Clock punchers – We don’t attract those looking for just a "job"; we seek individuals who want to build careers, take ownership, and find joy in their work every day.

Responsibilities

IT Strategy & Roadmap

• Define and execute a multi-year IT and security roadmap aligned to ARMRA's growth plan
• Own the IT budget end to end—forecasting, spend management, and cost optimization across the software stack
• Serve as the executive voice on technology: translate risk, tradeoffs, and investment needs for a non-technical leadership team
• Evaluate emerging technology and make clear build/buy/kill recommendations
• Lead major implementations from selection through adoption, including cross-functional systems that touch People, Finance, Marketing, and Operations

Identity, Access & Security

• Own identity and access management in Okta—SSO, SCIM provisioning, lifecycle automation, MFA/passkey policy, and app integrations across the full stack
• Design and enforce least-privilege access; run recurring access reviews and offboarding audits
• Build and maintain the security program: endpoint protection, email security, phishing and social engineering defense, security awareness training, and incident response
• Own vendor security review and third-party risk assessment for new tools
• Ensure compliance with applicable data protection and privacy requirements (CCPA/CPRA, GDPR, state privacy laws), and prepare the organization for customer- and partner-driven security requirements as we scale into retail
• Protect customer and employee data across a DTC environment where PII and payment data flow through multiple systems

Device & Endpoint Management (Apple-First)

• Own the Apple fleet end to end—macOS and iOS provisioning, configuration, patching, and decommissioning
• Administer Kandji MDM: zero-touch deployment, blueprints, compliance policies, encryption enforcement, and automated remediation
• Own hardware lifecycle and asset inventory, including procurement, logistics, and recovery for a distributed remote workforce
• Build and maintain inventory management and automation in Rippling—device assignment, app provisioning, onboarding/offboarding workflows, and the automations that connect them

Systems, Integrations & Automation

• Administer Google Workspace / Gmail at the org level—security settings, groups, drive governance, retention, and data loss prevention
• Own or partner on the core business system landscape: HRIS (Rippling), Applicant Tracking System (Loxo), Shopify, and adjacent DTC, retail, and supply chain tooling
• Identify manual processes and automate them—the win condition here is a team of one that operates like a team of three
• Own integration architecture between systems so data flows without human intervention

AI Enablement

• Own ARMRA's AI tooling strategy and administration, including Claude and other AI platforms deployed across the company
• Set AI governance: acceptable use, data handling standards, security review of AI tools, and guardrails for what may and may not be shared with third-party models
• Drive internal adoption—training, enablement, and use case development that raises AI proficiency across every department

Vendor & Budget Management

• Own vendor relationships, contract negotiation, renewals, and SLA management
• Continuously audit the software stack for redundancy, underutilization, and consolidation opportunities

Business Continuity & Disaster Recovery

• Build, maintain, and regularly test business continuity and disaster recovery plans
• Own backup architecture and validated recovery procedures
• Define and execute the incident response playbook, including communication protocols

Support & Enablement

• Own the helpdesk—triage, resolution, and SLA performance for a fully remote workforce
• Build self-service documentation and training that reduces ticket volume over time
• Deliver a genuinely excellent onboarding and offboarding experience in partnership with People & Talent

Qualifications

• 10+ years in IT, including 4+ years at Director level or above with full functional ownership
• Demonstrated hands-on execution—you are current, not just directionally aware. You will be asked to speak to specific configurations you've built
• Deep expertise administering Okta (SSO, SCIM, lifecycle management, app integrations)
• Deep expertise with Kandji or comparable Apple MDM in a fully Apple-first environment
• Strong Google Workspace / Gmail administration at the org level
• Hands-on experience with Rippling, including inventory management and workflow automation
• Working experience administering or supporting an Applicant Tracking System (Loxo, Greenhouse, Ashby, or similar)
• Practical experience deploying and governing AI tools (Claude or equivalent) in a business environment
• Exceptional security depth: IAM, endpoint security, zero trust principles, incident response, vendor risk, and data privacy compliance
• Proven vendor management, contract negotiation, and budget ownership
• Experience supporting a fully remote, multi-state workforce
• Ability to communicate technical risk and tradeoffs clearly to non-technical executives

Preferred

• Experience in CPG, DTC, or e-commerce, including Shopify and retail/supply chain system exposure
• Experience preparing for or maintaining SOC 2 or similar compliance frameworks
• Scripting and automation capability (Bash, Python, or comparable)

Schedule

Monday-Friday 9am-6pm EST