Head of IT

Retool•San Francisco, CA

About The Position

Our Trust Team is seeking a Head of IT to own and evolve the technology foundation that powers Retool as a company. In this role, you’ll be responsible for the full lifecycle of corporate IT, from endpoint management and identity infrastructure to SaaS governance and internal support, ensuring that everyone has the tools, access, and support they need to do their best work. This is a leadership role with real program ownership: you’ll define and execute the IT strategy for a company that is building the tools of tomorrow. Our internal infrastructure should reflect that same standard of quality and innovation that we imbue in our product. You’ll partner closely with the Trust, Engineering, and People teams to ensure our IT environment is secure, efficient, and scales with the business. At Retool, we believe IT should be a force multiplier. If you’re someone who thinks about IT as a product, with internal personnel as your customers, and you’re energized by building systems that are elegant, automated, and secure by default, we’d love to hear from you.

Requirements

5+ years of experience managing IT teams, with a track record of building and scaling IT capabilities, not just maintaining something you inherited
Deep hands-on experience with modern SaaS-first IT stacks, including identity providers (Okta), endpoint management (Kandji, Jamf, or similar), and collaboration platforms (Google Workspace, Slack, Confluence)
Strong understanding of zero-trust principles and how they apply to endpoint compliance, device trust, and access management
Experience operating IT in a compliant environment (SOC 2, ISO 27001) with comfort owning controls and producing audit evidence
A product-minded approach to IT: you think about employee experience, measure satisfaction, and iterate on service delivery the way a product team would
Excellent communication skills with the ability to translate technical infrastructure decisions into business impact for leadership
Comfort with ambiguity and the ability to prioritize ruthlessly in a fast-moving environment where not everything is well-defined
A builder’s mindset: you think about automation, self-service, and scalability before adding headcount or manual processes

Nice To Haves

Experience with SaaS management platforms (Trelica, Zylo, Productiv, or similar) for license governance and shadow IT discovery
Familiarity with endpoint compliance tooling like Kolide for device trust enforcement
Experience administering, governing, and using AI/LLM tools (Anthropic, OpenAI, Gemini, Cursor) in an enterprise setting
Background in or strong partnership with security teams: you understand the intersection of IT operations and security posture
Experience at a developer tools company or in an environment with a highly technical employee base that expects high-quality internal tooling
Hands-on scripting or automation skills (Retool, Python, Bash, Terraform, or similar) for building IT workflows and integrations

Responsibilities

Own and operate Retool’s corporate IT environment end-to-end, including endpoint management (Kandji/Iru), identity and access management (Okta, 1Password), and SaaS administration (Google Workspace, Confluence, Slack, and many more)
Define and execute IT strategy aligned to business goals, ensuring our corporate infrastructure scales with headcount growth, supports compliance requirements, and enables productivity across all teams
Build and mature our SaaS governance program, including license optimization, shadow IT discovery, and vendor lifecycle management
Own the employee IT experience from onboarding through offboarding, from managing device provisioning, access workflows, to internal support via Risotto and direct engagement
Establish and enforce endpoint compliance and device trust policies using Kolide, ensuring fleet health and security posture across macOS and Windows environments
Develop and govern IT policies, standards, and runbooks that balance security requirements with developer productivity, particularly around device management, access controls, and acceptable use
Ensure IT operations align with SOC 2, ISO 27001, and other compliance frameworks, owning controls where IT is the operator
Drive automation and tooling improvements to reduce toil, improve mean time to resolution, and deliver self-service capabilities wherever possible
Establish and govern the responsible use of AI tools across the organization, including administration and policy enforcement for platforms that we rely on every day like Claude and ChatGPT
Define IT metrics and reporting that demonstrate operational health, service quality, and program maturity to leadership