SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Gallatin is rebuilding logistics infrastructure for U.S. national security missions, building AI systems that transform how logistics decisions are made. As the second dedicated IT hire, you will own and scale the IT systems that support Gallatin's growing team.
You will work across endpoint engineering, identity and access management, SaaS administration, security and compliance, office infrastructure, automation, and employee support. This is a broad systems role with a strong endpoint focus, requiring hands-on expertise across macOS, Windows, mobile, identity platforms, and cloud applications.
Key responsibilities include:
**Endpoint Management:** Own the complete lifecycle of macOS, Windows, and mobile environments from enrollment through deprovisioning. Build and maintain Jamf Pro policies, profiles, packages, scripts, smart groups, compliance controls, and Self Service workflows. Implement and operate Windows device management through Microsoft Intune in GCC High. Design Google Workspace mobile application management controls. Automate provisioning, application deployment, patching, security baselines, inventory, and compliance reporting.
**Identity and Enterprise Systems:** Own identity lifecycle workflows across Okta, Google Workspace, Microsoft 365 GCC High, Slack, and other business-critical platforms. Automate onboarding, role changes, access reviews, and offboarding using APIs, scripts, and workflow tools. Design access controls around least privilege, device trust, role-based access, and data sensitivity. Administer and integrate core productivity, collaboration, engineering, and business applications. Establish guardrails for enterprise AI tools and AI-enabled SaaS applications, including authentication, provisioning, data handling, retention, integrations, and audit logging. Partner with Security and Engineering to protect sensitive company and government data.
**Environment Strengthening:** Translate CMMC, NIST 800-171, and other compliance requirements into technical controls. Build reliable device compliance, access enforcement, evidence collection, and audit-readiness workflows. Troubleshoot complex issues across endpoints, identity, SaaS applications, networking, authentication, and operating systems. Provide direct employee support while eliminating recurring failure modes through engineering and automation. Create clear documentation, runbooks, standards, and employee-facing guidance.
Gallatin values clear thinking, direct communication, and ownership that doesn't stop until something works. The mission is to create decision advantage in the most demanding environments, enabling faster, smarter logistics decisions in contested environments.
**Requirements:**
- Experience as an IT Systems Engineer, Endpoint Engineer, Systems Administrator, or similarly broad technical role
- Strong hands-on Okta administration, including SSO, MFA, application integrations, lifecycle management, and access policies
- Strong hands-on management of macOS, Windows, and mobile devices using Jamf Pro, Microsoft Intune, and Google Workspace
- Experience operating Microsoft 365 and Intune in GCC High or another regulated Microsoft cloud environment
- Ability to independently design, implement, operate, and improve production IT systems
- Strong troubleshooting skills across operating systems, networks, identity platforms, and cloud applications
- Automation skills using Bash, PowerShell, Python, APIs, or workflow platforms
- Understanding of identity lifecycle management, device trust, least privilege, conditional access, and role-based access
- Strong communication, documentation, and judgment in fast-moving environments
- Comfort operating in a small team where ownership is broad and outcomes matter more than organizational boundaries
**Bonus skills:**
- Endpoint privilege management and application control
- Enterprise browser management, secure web gateways, or SaaS security posture management
- macOS Platform SSO or Windows Hello for Business
- PKI, device certificates, and certificate lifecycle management
- Configuration-as-code or infrastructure-as-code for corporate IT systems
**Note:** This position may require the ability to obtain and maintain a U.S. government security clearance and the ability to work in a classified environment. U.S. citizenship is a requirement for all positions at Gallatin.
