IT Operations Engineer - Compliance & Controls

TEKsystems•Dallas, TX

7d•$48 - $74•Remote

About The Position

Our Healthcare client is seeking an IT Operations Engineer – Compliance & Controls to support the security, reliability, and continuous audit readiness of its enterprise systems. This role will combine hands-on IT Operations engineering with technical compliance ownership, ensuring infrastructure, identity, and operational processes align with ITGC, SOC 1, SOC 2 Type II, SOX, and NIST requirements. The engineer will partner with IT Operations, Security, Engineering, and other system owners to identify control gaps, implement technical remediations, automate repeatable processes, and maintain clear evidence that controls are operating effectively. This is not an audit-only or documentation-focused GRC role; the selected candidate must be capable of making technical changes and improving the systems and processes being evaluated.

Requirements

2+ years of hands-on IT Operations, systems administration, or infrastructure experience with responsibility for implementing and maintaining technical controls aligned with ITGC, SOC 2 Type II, SOX, or NIST.
Understand how compliance requirements translate into system configurations, operational processes, and audit evidence.
Proven ability to identify control gaps, determine root causes, implement corrective actions, and drive remediation through completion.
Hands-on technical contributor—not solely an auditor or documentation-focused GRC analyst.
Experience maintaining audit-ready systems through control documentation, evidence collection, access reviews, patching, change-management records, security monitoring, and repeatable operational procedures.
Strong production experience supporting enterprise infrastructure, identity, networking, SaaS applications, or cloud environments.
Understand how systems operate and how compliance controls affect day-to-day IT Operations.
Hands-on PowerShell or Python experience used to automate controls, evidence collection, monitoring, patching, access-management tasks, or other repetitive operational processes.
Working knowledge of Microsoft Entra ID, on-premises Active Directory, Azure infrastructure, identity synchronization, access controls, and user-lifecycle processes within a hybrid environment.

Nice To Haves

Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or a related field preferred.
Experience working within healthcare, financial services, or another regulated industry is beneficial.
Familiarity with SOC 1, SOX, NIST, identity governance, change management, incident response, and disaster recovery is preferred.
Experience supporting Microsoft Azure, Microsoft Entra ID, on-premises Active Directory, hybrid identity synchronization, and cloud networking is beneficial.
Familiarity with observability and security tools such as Datadog and Wiz is preferred.
Experience delivering infrastructure changes through CI/CD tools such as GitHub Actions or GitLab is beneficial.
Experience developing SOPs, runbooks, control narratives, technical documentation, and remediation plans.
Practical AI fluency, including the ability to build and document repeatable AI-assisted scripting and troubleshooting workflows while applying appropriate security controls and human review.
Ability to distinguish between an IT system failure, security-policy restriction, and compliance-control issue using logs, telemetry, and structured troubleshooting.
Strong analytical, problem-solving, documentation, and communication skills.
Ability to work independently, prioritize competing responsibilities, and partner effectively with IT Operations, Security, Engineering, IAM, auditors, and business stakeholders.
Must be comfortable participating in incident response, root-cause analysis, and on-call support as needed.
Success requires a hands-on engineering mindset, strong ownership, attention to detail, and the ability to make systems compliant without creating unnecessary operational friction.
Relevant certifications such as CISA, CRISC, Security+, Azure Administrator, Azure Security Engineer, or Identity and Access Administrator are helpful but not required.

Responsibilities

Assess enterprise systems and operational processes against ITGC, SOC 1, SOC 2 Type II, SOX, and NIST requirements.
Translate compliance requirements into sustainable system configurations, controls, workflows, and technical procedures.
Identify control gaps, perform root-cause analysis, and drive remediation through completion.
Maintain continuous audit readiness through control documentation, evidence collection, access reviews, patching records, change records, and security-monitoring outputs.
Support hybrid infrastructure and identity environments involving Microsoft Azure, Microsoft Entra ID, and on-premises Active Directory.
Partner with Security and IAM teams to troubleshoot access, policy, synchronization, and identity-governance issues.
Automate manual compliance and IT Operations activities using PowerShell, Python, and AI-assisted scripting tools.
Govern patching, system monitoring, access controls, change management, and other recurring operational controls.
Use tools such as Datadog and Wiz to monitor system health, security posture, and control effectiveness.
Support incident response, root-cause analysis, and documentation of lessons learned.
Create and maintain SOPs, technical documentation, runbooks, control narratives, and remediation plans.
Support disaster recovery, operational resilience, and technical-standardization initiatives.
Use AI-assisted tools responsibly for scripting, troubleshooting, analysis, and documentation while recognizing when traditional logs, technical investigation, or vendor escalation is required.
Communicate control status, remediation progress, and technical risks clearly to IT Operations, Security, auditors, and leadership.