IT Infrastructure Services Specialist

Sutro Biopharma•South San Francisco, CA

About The Position

Sutro Biopharma is seeking a hands-on, experienced IT professional to join our team as an IT Infrastructure Services Specialist. This role focuses on the reliability, security, and performance of enterprise and laboratory computing environments, with a strong emphasis on Windows and macOS endpoints. The position serves as a senior escalation resource for desktop and computer lab support while contributing to the systems and services that underpin end-user computing. The ideal candidate enjoys working close to the hardware and operating system layer, improving workstation stability, and partnering with scientists and business users to keep critical computing environments running smoothly.

Requirements

5–8 years of progressive IT experience with a strong emphasis on endpoint support, desktop engineering, or end-user computing in a professional environment.
Bachelor’s degree in Computer Science or equivalent hands-on experience.
Strong troubleshooting skills across Windows and macOS operating systems in mixed environments.
Hands-on experience managing and supporting endpoints using tools such as Workspace One, Microsoft Intune, and Group Policies.
Practical working knowledge of Active Directory, Entra ID, and hybrid identity environments.
Comfortable supporting both PC (~75%) and Mac (~25%) systems, including hardware, peripherals, and OS-level issues.
Solid understanding of networking fundamentals (TCP/IP, VLAN, VPN) as they relate to endpoint connectivity and remote access.
Hands-on, service-oriented technologist who enjoys solving real-world computing problems.
Strong communication skills and the ability to translate technical issues for non-technical users.
Organized, detail-oriented, and comfortable operating in a fast-paced, on-site and remote environment.
Familiarity with wearing PPE in lab spaces and able to lift computer equipment weighing up to 40 lbs.

Nice To Haves

Life Sciences experience preferred.
Relevant certifications (Microsoft, Azure, Google Cloud Platform, endpoint management, or security-focused) are a plus but not required.

Responsibilities

Advanced Endpoint Support & Escalation
Independently resolve moderate to advanced endpoint issues, including OS-level troubleshooting, application conflicts, hardware failures, driver issues, and peripheral integration.
Act as the primary point of contact for complex desktop and lab computer incidents, escalating to IT support staff with troubleshooting strategies and root-cause analysis.
Develop, refine, and document standardized workstation builds, deployment, and support procedures for Windows and macOS systems.
Support installation, configuration, and maintenance of specialized research, analytics, and productivity software across PC and Mac platforms.
Endpoint & Core Systems Management
Administer and support core services that enable endpoint computing, including File Services, Active Directory, Entra ID, Power Automate, Office365, Microsoft Exchange Online and Google Cloud Platform.
Manage patching, OS updates, endpoint security, and configuration standards for enterprise and lab workstations.
Operate and maintain endpoint management and protection platforms such as Workspace One, Microsoft Intune, Barracuda Backups, OneDrive, and Varonis.
Monitor endpoint health and security posture using tools such as Microsoft Defender and Darktrace, responding to issues and improving baseline configurations.
Projects & Cross-Functional Collaboration
Lead endpoint-focused initiatives such as workstation refresh programs, lab computer deployments, OS migrations, and application rollouts.
Partner with Research, Tech Ops, Finance, and the IT team to deliver practical, supportable computing solutions.
Coordinate with management and external vendors on projects that impact end-user and lab computing environments.
Controls, Documentation & Best Practices
Support SOX-related controls by implementing consistent endpoint standards, improving documentation, and assisting with audits and remediation activities.
Create and maintain technical documentation, SOPs, and system inventories related to endpoint and user-facing infrastructure.
Assist with the ongoing improvement of identity and access management practices, including SSO and MFA, as they relate to workstation and application access.