IT Operations Lead

This role is for someone who can work a help desk queue in the morning, negotiate a vendor contract at lunch, and draft a multi-site IT roadmap in the afternoon. You will own your areas outright and be accountable for your own priorities, timelines, and status reporting without close supervision.

What You'll Own

Day-to-Day IT Operations

• Provide reliable IT support for employees across all sites, resolving help desk requests and coordinating with your OT counterpart when an issue needs hands on-site.
• Support our MDM fleet comprising macOS, iOS, and Windows devices.
• Execute onboarding and offboarding workflows, including provisioning accounts, configuring devices, and revoking access in coordination with HR and People Operations.
• Manage procurement and asset management, covering hardware purchasing, lifecycle tracking, and inventory accuracy from purchase to decommission.
• Troubleshoot corporate infrastructure issues including network problems and A/V systems.

Tech Stack and Implementation

• Own Google Workspace administration, including users, groups, SSO and SAML integrations, and role-based access controls. Define what a sustainable IDP and IAM architecture looks like as we scale, and own the migration path.
• Own our SaaS stack, including tool selection, SSO coverage, and the full license lifecycle from procurement through renewal and decommissioning.
• Maintain and improve integrations across our core systems, including Google Workspace, Jamf, Rippling, Ashby, and our collaboration tools.
• Create and maintain IT documentation that is usable by technical and non-technical audiences, and that your OT counterpart can work from directly.

Network Infrastructure

• Serve as the internal owner for corporate network infrastructure across all sites, partnering with external vendors on design, implementation, and ongoing support.
• Ensure appropriate segmentation across corporate, lab, and guest environments, defining the corporate and guest side and setting the boundary with the lab network in partnership with OT.
• Define and evolve our network management approach as the company scales.

Security and Compliance

• Partner with security vendors on endpoint protection, identity management, and compliance controls, owning those relationships and managing the engagements effectively.
• Own security hygiene including access reviews, identity security tasks, and audit evidence gathering for SOC 2 and HIPAA.
• Extend identity, endpoint, and access standards consistently to lab-adjacent systems, working with OT where those systems sit outside the corporate fleet.
• Evolve our security operations approach as the company scales, working with leadership to determine the right model and resourcing.

Vendor and Stakeholder Management

• Manage relationships with IT and security vendors, ensuring clear scope, accountability, and value delivery.
• Communicate proactively with stakeholders across the company through regular updates on IT initiatives, clear escalation paths, and responsive support.
• Contribute to IT initiatives and projects, managing priorities and ensuring execution against timelines.

Qualifications

Required

• You have 5 or more years of experience in IT operations, including hands-on support, systems administration, and vendor management.
• You have supported distributed or multi-site teams, including users at locations you were not physically present at.
• You have administered SSO and SAML in Google Workspace, including users, groups, and app integrations, and can articulate what a long-term sustainable IDP and IAM architecture looks like and how to get there.
• You have hands-on MDM experience with macOS, with Jamf strongly preferred, and familiarity with iOS and Windows device management.
• You have a strong working understanding of network fundamentals, including VLANs, WiFi segmentation, firewall basics, and troubleshooting.
• You have managed external vendors and contractors, including setting expectations, tracking deliverables, and holding accountability.
• You communicate clearly in writing and in person, and are comfortable supporting executives and bench scientists alike.
• You are able to work in a hybrid capacity in New York, with regular coordination across California and European hours as our footprint there grows.

Nice to Have

• You have built or scaled an IT function, or split an IT and OT boundary in a lab or manufacturing environment.
• You have worked in biotech, life sciences, or another environment with HIPAA and PHI requirements.
• You have exposure to compliance frameworks such as SOC 2, ISO 27001, HIPAA, or NIST.
• You are familiar with UniFi or similar network equipment, and with EDR and endpoint protection platforms.
• You are comfortable automating routine work, whether through scripting (Python, Bash, PowerShell), no-code tooling, or HRIS integrations.
• You have supported users across European time zones, ideally including sites established from scratch.

A meeting lands on your calendar

If they’re a yes, I book the chat. You show up — that’s the whole job-hunt.