IT Lifecycle Management Lead

OpenLoop Health•Des Moines, IA

About The Position

OpenLoop is hiring an IT Lifecycle Management Lead to own and improve the identity and device lifecycle for employees, contracted clinicians, outsourced support teams, and other users. The role is responsible for making onboarding, role changes, and offboarding predictable across different worker types, from HR or vendor intake through day-one readiness and final deprovisioning. It emphasizes automation, reliable access controls, device logistics, compliance, measurement, and consistent operating procedures. The successful candidate will ensure that new hires have working accounts, appropriate access, and configured devices before starting, and will verify their ability to log in on day one. On departures, the role will promptly remove access, recover devices, rotate shared credentials, and retain audit-ready evidence. The lead will standardize requests with HR and BPO partners, collaborate with IT Systems Engineering on lifecycle automation, manage domestic and international laptop logistics, connect application access to HIPAA training and role requirements, conduct periodic access reviews, report operational metrics, and maintain playbooks and help desk training materials in Confluence. OpenLoop describes its organizational structure as relatively flat and encourages employees to contribute ideas and take action. The role calls for someone who treats onboarding and offboarding as a product, improves repetitive manual work, follows through across teams, and recognizes access removal as a critical security responsibility.

Requirements

At least 4 years of experience in IT operations, identity and access management, or end-user services, with direct ownership of onboarding and offboarding.
Hands-on administration of an identity provider, including groups, lifecycle states, and SSO-connected application provisioning; Okta is heavily preferred.
Experience with Apple device management tools such as Kandji, IRU, or Jamf, or similar tools.
Experience with zero-touch enrollment through Apple Business Manager.
Experience running lifecycle workflows in an ITSM or ticketing platform; Jira Service Management is preferred.

Nice To Haves

Experience integrating an HRIS such as Rippling or Workday with an identity provider for automated provisioning.
Scripting or automation experience using Okta Workflows, Python, APIs, or AI-assisted tooling.
Experience administering Google Workspace.
Experience managing global device logistics vendors.
Healthcare, telehealth, or high-growth company experience.
Relevant certifications, such as Okta Certified Administrator, Jamf, Kandji, IRU, or ITIL Foundation.
Working knowledge of HIPAA and access-control requirements in a regulated environment.

Responsibilities

Own end-to-end IT onboarding, role changes, and offboarding across worker types, from HR or vendor intake through day-one readiness and final deprovisioning.
Ensure new hires have working accounts, appropriate access, and configured devices before starting, and confirm they can log in on day one.
Run offboarding promptly after HR confirms a departure, removing access, recovering devices, rotating shared credentials, and retaining audit-ready evidence.
Standardize intake with HR and BPO partners so requests are complete and tied to standard role-based access profiles.
Partner with IT Systems Engineering to automate account creation, access assignment, and deprovisioning, and measure the savings from automation.
Manage laptop inventory, ordering, enrollment, shipping, and returns for domestic and international hires; refurbish returned devices for reissue.
Connect application access to HIPAA training and role requirements, run periodic access reviews, and maintain documentation for audits and client security reviews.
Track day-one readiness, time to provision, time to deprovision, error rates, and request volume, and use the results to identify improvements.
Maintain SOPs and runbooks in Confluence and train help desk technicians to use them consistently.