IT Lead

Role overview This is a hands-on, sole-owner IT leadership role for a distributed organization of roughly 350 people, reporting directly to the CTO. The function already runs in a lean, automation-first manner, and the incoming lead inherits a documented handover with the mandate to keep it efficient, evolve it, and make it legible to non-technical stakeholders. The scope spans identity, devices, SaaS governance, vendor and budget ownership, security operations, and governance of internal AI platforms.

Responsibilities - Operate as the entire IT function end-to-end, owning onboarding, offboarding, day-to-day support, and the AI-assisted triage and self-service flows that absorb most routine requests. - Manage identity and the employee lifecycle through Okta, Google Workspace, and an HRIS-driven automation pipeline that issues and revokes access automatically with system-generated audit trails. - Run a Mac-first fleet under MDM with near-100% coverage, enforce 100% passwordless authentication, and participate in security incident response. - Govern a SaaS portfolio of 50+ tools, the IT budget, and external vendor relationships. - Apply governance over company Claude and ChatGPT accounts, and continue using AI and automation to remove manual work from IT. - Maintain SOC 2 controls owned by IT in an audit-ready state, with evidence produced by the systems rather than assembled by hand.

Requirements - Prior experience owning IT solo for an organization of 200+ staff, including identity in Okta, Google Workspace, and Slack, with an HRIS-driven lifecycle that ran without manual intervention. - Hands-on ownership of a production Mac fleet under MDM, including at least one migration or baseline rebuild. - Administered ChatGPT and Claude (or comparable) accounts at a company, uses them daily, and has built automations that replaced manual IT work with a measurable outcome. - Default-to-automate mindset across scripting, APIs, logs, and admin consoles, including automating entire request categories. - Practical security judgment with prior experience operating inside a SOC 2 environment. - Strong direct support skills with a track record of personal support metrics, plus clear technical writing and the ability to brief executives concisely. - Ownership mindset, comfort inheriting systems without perfect handoffs, US-based on East or West Coast, and willingness to travel to San Francisco.

Nice to have - Experience with AWS IAM Identity Center and Terraform, or other config-as-code approaches transferable to Okta and Google Workspace. - Exposure to office buildouts, BYOD policy rollouts, international contractors, Windows, and ChromeOS.

Benefits and work setup - Remote-first distributed company hiring across US time zones with significant hours overlap required. - US salary ranges: $185,000–$220,000 in CA, WA, NY, NJ, and CT; $157,500–$187,000 in other US states. - Equal opportunity employer that considers qualified applicants with arrest and conviction records under the San Francisco Fair Chance Ordinance and accommodates disabilities and special needs.