IT Support Specialist

Finix•San Francisco, CA

27d•$110,000 - $140,000•Onsite

About The Position

Finix is seeking an IT Support Specialist who excels at the intersection of security, compliance, and employee experience. This role involves managing the systems and processes that ensure team productivity and environmental security, from device provisioning to retirement. The specialist will be crucial in maintaining compliance and scaling IT infrastructure with the company's growth. This is an in-office position located in San Francisco, CA.

Requirements

3-5+ years of IT operations experience in a Mac-first environment
Hands-on expertise with Atlassian, Kandji, Okta, and Palo Alto Networks
Strong understanding of employee lifecycle processes and their security implications
Experience supporting compliance frameworks (SOC 2, ISO 27001, or similar)
Comfortable writing shell scripts or Python to automate repetitive tasks
Ability to take ownership, communicate proactively, and treat internal employees as customers

Nice To Haves

Startup or high-growth experience
Experience building, not just maintaining

Responsibilities

Own end-to-end Mac device management using Kandji, including provisioning, enrollment, configuration, patch management, and secure decommissioning.
Design and manage onboarding and offboarding workflows, including automated provisioning and deprovisioning of access through Okta.
Administer Okta SSO, MFA, and lifecycle policies, enforcing least-privilege access controls across SaaS applications and internal systems.
Manage and maintain Palo Alto Networks firewalls and security policies, monitoring for threats, tuning rules, and upholding network segmentation standards.
Support SOC 2 or similar audits by maintaining accurate asset inventories, access logs, and evidence of policy enforcement.
Manage and maintain conference room audio/visual systems, ensuring reliable video conferencing and collaboration tooling.
Continuously improve IT workflows through scripting and automation, reducing manual toil and increasing reliability across device and identity management pipelines.