Tech Stack
AWSCloudGoogle Cloud PlatformLinuxPythonWeb3
About the role
- Support day-to-day IT operations including end-user support across hardware, software, and employee lifecycle requests
- Refine support tooling, documentation, and feedback loops; triage and resolve endpoint, access, and SaaS issues
- Manage on-site hardware and video conferencing equipment
- Manage lifecycle of Mac endpoints using Kandji, Crowdstrike, Kolide and asset management systems; improve Linux endpoint management
- Enforce baseline security policies, configuration standards, and compliance monitoring
- Administer Okta (group design, lifecycle policies, app integrations) and automate joiner/mover/leaver workflows, SCIM provisioning, role-based access controls
- Partner with security, engineering and infrastructure teams to implement least privilege, MFA, and audibility across services
- Operate technical management and integration of SaaS platforms (Google Workspace, Slack, Notion, GitHub, 1Password) and enhance user engagement and security posture
- Identify and eliminate repetitive tasks through scripting, APIs, and low-code tools; build small tools, bots, or dashboards integrating LLM tools securely
Requirements
- Strong experience with Okta, Google Workspace, and Mac endpoint management
- Basic scripting and automation experience such as Python, Bash, APIs, Zapier, or similar
- Detail-oriented with strong process documentation and change-management savvy
- A builder’s mindset (creating repeatable, self-service, or AI-enhanced processes)
- Familiarity with IAM best practices (least privilege, group-based access, audit logging)
- Excellent communicator and collaborator with technical and non-technical team members
- Nice to have: experience working in a fast-growing startup
- Nice to have: practical experience administering and supporting Linux endpoints
- Nice to have: exposure to cloud access patterns (GCP, AWS)
- Nice to have: experience using Kandji and Crowdstrike
- Must be legally allowed to work in France or the UK; no visa sponsorship provided
- Role is for full-time employees only (no B2B or contractors)