IT Operations Engineer

Roboflow

3d

About The Position

The IT Operations Engineer owns Roboflow’s corporate IT end to end, including identity, devices, SaaS, and the employee lifecycle from onboarding through offboarding. This role ensures employees are set up to work productively and that departures are handled cleanly. The engineer is the second member of the IT and security function, working alongside the Security & Automation Engineer within the Infrastructure organization. The Security & Automation Engineer owns the security program and audits; the IT Operations Engineer supports that work through day-to-day controls and evidence.

Roboflow operates as a distributed team across the US and Europe, with hubs in New York City and San Francisco. The role can be performed from a hub, from home, or from a co-working space. The company primarily operates during US daytime hours, with some weekly synchronous meetings; otherwise, the schedule is flexible and supports collaborative and asynchronous work.

Requirements

• 3–5 years of experience in IT operations or systems administration, including at least 1–2 years at a startup or small, fast-moving team.
• Hands-on administration experience with Okta or a similar SSO provider, such as Microsoft Entra ID, OneLogin, or JumpCloud.
• Experience managing a macOS fleet with an MDM such as Kandji, Mosyle, Jamf, Intune, or similar.
• Google Workspace administration experience.
• Scripting ability in Python, Bash, or a similar language, and a habit of automating repetitive tasks.
• Clear written communication and a practice of documenting work as it is done.

Nice To Haves

• Experience supporting a SOC 2, HIPAA, or ISO 27001 audit, or using a compliance platform such as Secureframe, Vanta, or Drata.
• Experience with Okta Workflows or other no-code automation tools.
• Linux familiarity and basic GCP or AWS IAM knowledge.
• Experience supporting a remote team across time zones.

Responsibilities

• Administer Okta or another SSO provider, including app integrations, groups, provisioning and deprovisioning, and MFA policies.
• Manage access requests and periodic access reviews across Google Workspace, Slack, GitHub, GCP, and other SaaS tools.
• Manage the macOS fleet through MDM, including enrollment, configuration profiles, operating system and application patching, and encryption.
• Handle laptop procurement, shipping, inventory, and recovery for a distributed team across the US and Europe.
• Own employee onboarding and offboarding end to end, ensuring new hires are productive on their first day and departures are fully closed out the same day.
• Provide support for hardware, software, and account issues, and turn recurring questions into documentation or self-service fixes.
• Support office IT, including Wi-Fi, conference rooms, and printers, at the New York and San Francisco hubs.
• Script and automate repetitive IT work, such as onboarding workflows, provisioning, and device compliance checks.
• Keep IT procedures, runbooks, and the asset inventory current.
• Manage SaaS licenses, renewals, spend, and removal of unused seats.
• Evaluate new tools and vendors with the Security & Automation Engineer.
• Maintain day-to-day IT controls, including device compliance, access reviews, and offboarding checks, and follow up on exceptions.
• Collect and organize audit evidence for SOC 2 Type 2, HIPAA, and future frameworks.
• Help roll out security awareness training and phishing simulations.

Benefits

• $4,000 per year travel stipend.
• $350 per month productivity stipend.
• $350 per month AI tools stipend.
• $150 per month team lunch stipend.
• $500 one-time home office stipend.
• Coverage of up to 100% of health insurance costs for the employee and their partner or family.
• Company equity.
• Relocation bonus for working from one of the hubs.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed