IT Systems Administrator / Workplace Operations Engineer

QuilrAI

About The Position

We are looking for an experienced IT Systems Administrator / Workplace Operations Engineer to take full ownership of internal technology infrastructure, the global device fleet, and identity management across a growing, distributed team in the US and India. The role designs, deploys, and maintains zero-touch device provisioning, enforces enterprise security standards, manages the SaaS application ecosystem, and delivers seamless onboarding and offboarding experiences for team members. The position covers device fleet management and endpoint security, global hardware procurement and lifecycle logistics, identity and access governance, SaaS administration, employee IT support and documentation, and maintaining readiness for security and compliance audits.

Requirements

3–6 years of experience in IT systems administration, desktop engineering, or workplace technology; preferably within a fast-growing tech startup or modern cloud environment.
Deep hands-on expertise with Microsoft Intune and Entra ID, including a proven track record creating configuration profiles, compliance policies, conditional access rules, and deployment packages.
Solid understanding of Apple Business Manager (ABM), Apple Push Notification service (APNs), and Automated Device Enrollment (ADE) for macOS.
Demonstrated experience managing distributed hardware logistics, procurement, and remote onboarding across North America and India.
Ability to work autonomously, prioritize operational issues, and communicate clearly with technical and non-technical stakeholders.

Nice To Haves

Experience supporting a company through a successful SOC 2 Type II audit.
Experience with scripting and automation using PowerShell, Bash, Python, or Microsoft Graph API.
Relevant industry certifications, such as Microsoft Certified: Endpoint Administrator Associate, Apple Certified Support Professional, or Jamf Certified.

Responsibilities

Manage zero-touch device deployment using Apple Business Manager (ABM) and Microsoft Intune.
Enforce endpoint security policies, including FileVault, BitLocker, OS patching, screen-lock policies, and firewall configurations.
Monitor device health and compliance; perform remote wipes, device locks, and credential revocations for lost, stolen, or offboarded devices.
Manage global laptop procurement and delivery across the US and India, coordinating with hardware vendors and authorised resellers.
Oversee device returns, shipping logistics, hardware diagnostics, secure re-imaging, and asset redistribution.
Maintain an accurate hardware inventory, including serial numbers, specifications, warranty details, and employee assignments.
Administer Microsoft 365 and Microsoft Entra ID, including SSO, MFA, role-based access controls, shared mailboxes, and user directories.
Manage user provisioning, access permissions, license allocation, and de-provisioning across Slack, Microsoft Teams, Atlassian, Google Workspace, and DocuSign.
Coordinate with People Operations to ensure timely access provisioning for new hires and immediate access revocation during offboarding.
Provide technical support for hardware issues, account lockouts, VPN connectivity, network access, software installations, and system permissions.
Troubleshoot IT incidents and resolve employee support requests within defined service levels.
Create and maintain IT documentation, self-service guides, security policies, and employee onboarding procedures.
Maintain IT operations in alignment with SOC 2 Type II, ISO 27001, GDPR, and internal security requirements.
Conduct regular access reviews, monitor audit logs, and maintain evidence for internal and external audits.
Identify and remediate security gaps while collaborating with Security and Compliance teams to maintain continuous audit readiness.