Design and implement beehiiv's corporate IT infrastructure from its current state to an enterprise-ready foundation — including network architecture, tooling selection, and systems integration.
Establish and document IT standards, policies, and procedures where none currently exist, creating a repeatable and auditable framework as the company scales.
Evaluate, procure, and deploy new tools and platforms that align with our security posture and operational needs.
Build automated provisioning and de-provisioning workflows that reduce manual overhead and human error as headcount grows.
Own the IT roadmap: identify gaps, propose solutions, and drive implementation with minimal hand-holding.
Own the full lifecycle of employee identity — seamless onboarding/offboarding, group permissions management, and strict enforcement of MFA/SSO protocols in Okta.
Design and maintain role-based access control (RBAC) structures that scale with the organization without creating security debt.
Manage a global fleet of company MacBooks (and some Windows/Linux machines) using Kandji, ensuring all devices are encrypted, patched, and compliant with our security policies.
Act as the primary admin for Google Workspace, managing everything from email routing and shared drives to security auditing and tenant-level configuration.
Handle escalated IT helpdesk tasks — tech support, hardware troubleshooting, application access — with an eye for detecting social engineering or phishing attempts.
Assist in hunting down corporate phishing attempts, performing malware removal, and implementing security protocols to keep our remote perimeter safe.
Partner with HR (BambooHR) and Engineering to automate provisioning workflows and integrate IT systems into the broader operational stack.

Requirements

Experience architecting end-to-end within Kandji/Iru, Okta, and Google Workspace — ideally in a high-growth or startup environment.
Prior experience building an IT function or infrastructure at an early-stage or scaling company.
Direct experience supporting Senior Leadership and handling the discretion that comes with it.
Familiarity with Okta integrations and lifecycle management workflows.
A background in Information Security that extends beyond traditional IT support.
High proficiency in macOS is a must.
Solid experience with Windows (10/11) and familiarity with Linux.
Deep working knowledge of Okta and Google Workspace.
Proven experience managing mobile devices via an MDM (Kandji preferred).
Understanding of DNS, DHCP, IP addressing, and troubleshooting connectivity in a remote home-office context.
Experience with malware removal, device encryption, and familiarity with compliance frameworks like SOC 2.
Experience not only with following processes and procedures, but creating them when needed.
Experience using ITSM platforms to manage and prioritize requests.
Proficiency with scripting languages and automation.

Benefits

Health, Dental, and Vision Insurance
401(k) Employer Match
Unlimited PTO (mandatory 10 days per year minimum)
Annual In-person team Retreat
Unlimited Book Budget
Monthly Wellness Days (every third Friday of the month)

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

network architecturesystems integrationautomated provisioningrole-based access controlmalware removaldevice encryptionscripting languagesITSM platformsmacOSWindows

Soft Skills

problem-solvingdiscretioncollaborationdocumentationcommunicationleadershipattention to detailadaptabilityprocess creationtechnical support