IT Systems Administrator

Medely

3d•$85,000 - $95,000•Remote

About The Position

Medely is seeking an IT Systems Administrator to support and improve IT for its remote workforce. The role combines hands-on IT support, administration of identity, device, and SaaS systems, and automation engineering, with a security-first approach. The IT environment includes Okta, Iru MDM, n8n, Notion, Google Workspace, Microsoft 365, Zoom, Zoom Phone, Rippling, Ashby, Torii, 1Password, and a ticketing platform. The administrator will own identity and access management, employee lifecycle workflows, macOS and Windows device management, IT operations, Zoom and Zoom Phone administration, safe AI enablement, SaaS governance, security operations, IT data architecture, and Notion administration. The position emphasizes automated, auditable, least-privilege access; reliable integrations; sound security controls; clear documentation; and collaboration with Security, HR/People Ops, Legal, Finance, and business teams. Success includes closing provisioning gaps, delivering production automations, governing discovered SaaS applications, improving onboarding and offboarding workflows, enabling self-service access requests, and building trusted operational data and dashboards. The role is fully remote-first; work location is flexible if approved by Medely.

Requirements

At least 4 years of experience in IT operations, systems administration, or IT engineering in a SaaS-first, remote company.
Deep hands-on Okta administration experience, including SAML/OIDC SSO, SCIM, group rules, attribute mapping, authentication policies, Device Trust, and Okta Workflows.
Hands-on MDM experience for both macOS and Windows, including Iru/Kandji, Jamf, and/or Intune; ABM/ADE, Autopilot, compliance policies, and application deployment.
Ability to troubleshoot, secure, and deploy on both macOS and Windows.
Microsoft 365/Office 365 experience, including licensing, application deployment, Entra ID basics, coexistence with Google Workspace, and support for Office apps on both operating systems.
Experience building automations and integrations with n8n, Okta Workflows, Zapier/Make, or Workato, using REST APIs, webhooks, and JSON; n8n is strongly preferred.
Hands-on experience building governed solutions with LLM APIs such as Anthropic or OpenAI, MCP connectors, and AI agents, with least-privilege access, sensitive-data protections, human review where warranted, logging, and documentation.
Strong understanding of least privilege, RBAC, joiner/mover/leaver processes, and SOC 2-aligned IT controls.
Experience partnering with HR/People Ops on onboarding, transfers, leaves, and offboarding using clear handoffs, shared data standards, and confidentiality.
Hands-on 1Password Business or Enterprise administration, including provisioning, vault design, permissions, policies, account recovery, and shared-credential governance.
Security-minded approach, including ability to read authentication logs, identify risky configurations, and uphold security controls.
Experience with SaaS management and shadow IT discovery using Torii, Productiv, Zluri, or similar tools.
Google Workspace administration, including groups, shared drives, security settings, and data transfer.
Hands-on Zoom and Zoom Phone administration, including licensing, SSO/SCIM, meeting and recording policies, number management and porting, call queues, auto receptionists, routing, and E911.
Advanced administration of ticketing platforms such as Jira Service Management, Freshservice, Zendesk, or Intercom, including workflows, routing, forms, catalogs, SLAs, queues, and integrations.
Ability to translate technical concepts into plain English and turn business needs into clear technical requirements, designs, and workflows.
Strong writing skills for runbooks, knowledge-base articles, and decision documents that are accessible to technical and non-technical readers.
Reliable ownership, deadline management, visibility into work, and early escalation of blockers.
Self-directed technical growth and initiative.
If not already Okta Certified, complete Okta Professional and Administrator certifications within the first 6 months; training is available through the Okta Expert Learning Pass.

Nice To Haves

Okta Certified Professional certification.
Okta Certified Administrator certification; Okta Certified Consultant or Workflows certification is also a plus.
Notion certification, such as Notion Admin or Notion Essentials, or equivalent.
Apple Certified Support Professional or Apple Deployment and Management certification.
Microsoft Endpoint Administrator (MD-102) or equivalent Intune certification.
Jamf or Kandji/Iru certification.
Google Workspace Administrator certification.
Zoom Phone or Zoom Workplace administration training or certification.
Security fundamentals certification such as CompTIA Security+ or similar.
Intercom administration experience, including workspaces, inboxes, teams, routing, workflows, bots, Fin AI, help center, and integrations.
Scripting experience with Python, JavaScript, Bash, or PowerShell.
Experience with Rippling, Ashby, Torii or similar SaaS management systems, Material Security, or Slack administration and Workflow Builder.
Experience with GTM systems, especially Salesforce user and license management, profiles and permission sets, Okta SSO/provisioning, connected apps, integration users, and sandbox access.
Familiarity with GTM tools such as Gong/Gong Engage, Salesloft, HubSpot, LeanData, ZoomInfo, Clay, Gainsight, Intercom, Segment, and Letter.AI or similar platforms.
Experience partnering with RevOps/GTM Systems on access bundles, employee lifecycle processes across GTM tools, integration/API token governance, and license true-ups.
Basic data modeling and dashboard building in Notion, Metabase, or Tableau.
Experience supporting SOC 2 audits and evidence collection.

Responsibilities

Own Okta identity and access management, including SSO, SCIM provisioning, group rules, attribute mapping, authentication policies, MFA/FastPass, and administrator role scoping.
Make Okta the provisioning source for eligible applications, implement supported SCIM integrations, and maintain role- and department-based RBAC and access control matrices.
Build birthright and time-bound access, automate revocation, govern shared and service accounts, conduct access reviews, and produce audit-ready evidence.
Partner with Security on zero-trust posture, device admission, geofencing, and monitoring Okta system logs and administrative activity.
Build and maintain workflows and integrations using n8n, Okta Workflows, and the ticketing platform, connecting identity, HR, recruiting, collaboration, and business systems.
Use REST APIs, webhooks, OAuth/API tokens, and JSON to build reliable integrations with logging, retries, error handling, and alerting.
Automate the employee lifecycle, including pre-hire preparation, staged account creation and activation, Day-1 access, role changes, and audited offboarding.
Partner with HR and People Ops on lifecycle data standards, trigger timing, start dates, transfers, leaves, and terminations, handling sensitive information discreetly.
Create self-service access requests with appropriate approval routing and automatic provisioning, and maintain production-quality automation documentation, runbooks, credential controls, and ownership.
Manage macOS and Windows MDM, including enrollment, device profiles, compliance baselines, patching, application deployment, and FileVault/BitLocker.
Maintain and extend Okta Device Trust and enforce enrollment from managed, compliant devices.
Manage hardware lifecycle data and processes, including assignment, shipping, recovery, resale or disposal, and Finance reconciliation.
Provide frontline support through Medely Help for identity, device, SaaS, and cross-system issues; perform occasional password/MFA resets, troubleshooting, and remote machine replacement.
Own ticketing-platform configuration, including request catalog, forms, routing, categories, SLAs, privacy-aware queues, and AI triage behavior.
Maintain IT knowledge-base content and runbooks in Notion and support sustainable IT planning and reporting rhythms.
Administer Zoom Workplace and Zoom Phone, including SSO/SCIM, licenses, roles, settings, recordings, numbers, call queues, routing, E911, compliance, and reliability.
Integrate Zoom and Zoom Phone into hire, role-change, and offboarding workflows; monitor usage and right-size licenses and plans.
Enable AI tools and build governed AI-assisted workflows and integrations with scoped access, data boundaries, logging, human review where appropriate, and clear ownership.
Establish AI safeguards, employee guidance, request and review processes, and partner with Security and Legal on acceptable-use policy and vendor reviews.
Own Torii SaaS discovery and governance: triage unsanctioned applications and OAuth grants, assign application owners, maintain inventory, and automate usage-based license reclamation and renewal workflows.
Administer 1Password, including Okta-integrated provisioning, vault structure, permissions, policies, recovery, and reporting.
Support incident response, security awareness, SOC 2 controls, and evidence collection; apply least privilege and maintain secure credential practices.
Design reliable IT data and sources of truth across Rippling, Okta, the ticketing platform, and Notion; create dashboards and metrics for tickets, provisioning, devices, licenses, and SaaS spend.
Administer Notion, including teamspaces, permissions, SSO/SCIM, databases, forms, automations, and AI agents, and establish standards that help departments avoid oversharing and shadow IT.