SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 120,000 - 190,000 / annual
Range is building AI-powered wealth management software (investments, taxes, retirement, estate planning) backed by Google's Gradient Ventures, Cathay Innovation, and Scale Venture Partners. As a registered investment adviser, the company prioritizes security and auditability.
You will own IT systems end-to-end, operating in code with AI and security built in. Your responsibilities span:
**Employee Lifecycle & Identity Management**: Design and automate onboarding, role changes, and offboarding workflows across Google Workspace, SSO-connected apps, VPN, password manager, Slack, and GitHub. Run Google Workspace as the identity provider with SAML/OIDC SSO and SCIM provisioning. Enforce least privilege, time-bound admin rights, and conduct regular access reviews.
**Apple Fleet Management**: Own the macOS fleet through MDM and Apple Business Manager, including procurement, inventory, and hardware recovery across three offices (McLean, New York, Seattle).
**SaaS & License Management**: Run app intake and security review, manage licenses and seats, track spend, and reduce tool sprawl.
**Infrastructure-as-Code**: Manage Workspace configuration, groups, and DNS through infrastructure-as-code (Pulumi) in GitHub with pull-request review and CI/CD.
**Support & Automation**: Own the IT support channel and build AI agents and automations to resolve common requests (password resets, access requests, app installs) without manual intervention. Write self-service documentation.
**Security & Compliance**: Partner with the security team on SOC 2 controls, endpoint incident response, and regulatory/audit evidence.
**Office Technology**: Maintain Wi-Fi, networking, conference rooms, and peripherals across all three offices.
You are an owner who proactively identifies and solves problems. You are automation-first—if you've done something twice by hand, you're scripting it. You use AI daily to write scripts, triage requests, and build tools. You are security-minded with least privilege as your default, service-oriented with non-technical colleagues, and calm under pressure during incidents or same-day departures. You care about outcomes and how IT feels to the people using it.
**Requirements:**
- 5+ years in IT systems administration or corporate engineering
- Deep Google Workspace administration experience
- macOS fleet management with a modern MDM (Jamf, Kandji, Mosyle, or similar) and Apple Business Manager
- Hands-on SSO and identity experience: SAML, OIDC, SCIM, MFA, and RBAC
- Scripting in TypeScript, Python, or Bash, and comfort working in Git with pull requests
- Track record of automating onboarding, offboarding, and access management
- Strong security fundamentals: least privilege, encryption, endpoint protection, and incident response
- Clear written communication (runbooks, company-wide announcements)
**What Will Set You Apart:**
- Infrastructure-as-code in Pulumi or Terraform applied to identity and SaaS
- Building IT automations or AI agents (Okta Workflows, Tines, Zapier, or custom)
- SOC 2 or regulated financial services experience (RIA, broker-dealer, bank)
- Networking and VPN experience (Wi-Fi, firewalls, Tailscale/WireGuard, OpenVPN)
- AWS IAM Identity Center or Okta administration
- Supporting multiple offices at a startup
Role is based in McLean, VA, in-office Monday–Friday, with occasional travel to support New York and Seattle offices.
