IT Manager

Aescape•New York, NY

8d•$115,000 - $140,000•Hybrid

About The Position

Aescape is looking for an IT Manager to own the systems and infrastructure that keep our team running. This is a hands-on role for someone who has been the IT person at a small company before. You'll be the single point of accountability for IT at Aescape: end-user support, equipment lifecycle, account and systems administration, and the connective tissue across the tools every team relies on. You'll work directly with leadership, the People team, and partners across the business, and you'll report to our Head of People. If you've ever been the person everyone in a startup turns to when something tech-related needs to actually work, this is your role.

Requirements

3+ years in an IT role at a startup or small company (under 200 people). You've been the IT person, not one of ten people on an IT team.
Demonstrated comfort operating as a team of one. You can prioritize independently, decide what gets done now versus next week, and communicate trade-offs.
Hands-on experience with the modern startup tech stack: Mac fleet management (JAMF, Kandji, or similar), Google Workspace administration, Slack admin, identity providers (Okta, Google SSO, or similar), HRIS administration, and a ticketing system (Jira or similar).
Experience supporting a remote and distributed workforce alongside an onsite team.
Direct experience as part of a SOC 2 Type 2 audit cycle (or comparable compliance audit). You've contributed evidence, owned a control area, or partnered with the team running the audit.
A service mindset. You understand that IT is a customer-facing function inside the company.
Comfort with ambiguity. The scope of this role will evolve as Aescape scales.

Nice To Haves

Working knowledge of networking fundamentals.
Light scripting (Python, Bash, AppleScript) for automation of repetitive tasks.
Prior exposure to a hardware, robotics, or consumer technology company.

Responsibilities

Own the day-to-day IT experience for the team: new-hire equipment provisioning, account setup, onboarding sessions, and offboarding (account decommissioning, drive transfers, asset retrieval).
Run the helpdesk function. Triage and resolve laptop, peripheral, software, conferencing, and access issues across the team. Most requests are time-sensitive.
Provide white-glove support to the executive team when needed.
Manage the full hardware lifecycle: procurement (primarily through Apple Business and other commerce portals), configuration, deployment, asset tracking, and retrieval.
Maintain endpoint security across a primarily Mac fleet with some iOS and Windows.
Manage MDM, identity, and access tooling so the right people have the right access on day one and lose it on their last day.
Own the administration, billing, and account management of core company-wide systems (Google Workspace, Slack, Jira, HRIS, identity providers, and similar). Some team-specific tools are managed within their teams. The systems that cut across the company are yours.
Partner with teams adopting new tools. Help them evaluate the right fit, integrate into our identity and security model, onboard their users, and consolidate where it makes sense.
Manage HRIS integrations and the data flows that connect People, Finance, and IT systems.
Own the company's SOC 2 Type 2 program: evidence collection, access reviews, control documentation, and partnering with the team to ensure successful audits.
Build and maintain access controls, identity workflows, and security baselines that hold up to enterprise partner scrutiny.
Handle confidential and sensitive information with discretion. You'll have visibility into hires, departures, and access patterns; trust is non-negotiable.
Manage relationships with IT vendors and SaaS providers. Negotiate renewals, push back on pricing, consolidate where it makes sense.
Own the IT budget. Identify cost saves without dropping quality of service.
Partner with engineering, operations, and the People team on company-wide initiatives that have an IT component: SaaS evaluations, identity changes, security reviews, and similar.
For issues touching partner-facing software or platforms, partner with the engineering and operations teams who own that work.