Senior IT Analyst

Mercury•San Francisco, NY

About The Position

At Mercury, we believe that good security is a journey rather than a destination, which is really another way of saying that security is an ongoing process and not a one-time task. Even continual processes have an outcome or product, and for us, that outcome is trust. When we do our jobs right, we deliver trust to internal stakeholders and ultimately to the customer. Trust that Mercury is protecting their assets and privacy and that we are a reliable platform to run their business on. Being on the Information Security (InfoSec) team at Mercury means you will be instrumental in building and maintaining that trust through secure process and system design. Protecting our customer’s security and privacy is a top priority. We're all about using the latest technology to do things smarter. That's why we need an IT Support Analyst. This person will be our go-to for making sure our employees' systems are securely maintained while minimizing friction for internal teams. The ideal candidate should be ready and willing to come up with innovative solutions leveraging the newest technologies to address the unique problems they encounter. We work with teams across the enterprise to solve security, privacy, and compliance challenges, so be ready to collaborate. In a digital world where security risks are always changing, having IT Security and Support on board is crucial. Come be the hero who helps us stay safe and maintains trust with our customers.

Requirements

4+ years of IT operations experience, ideally in a fast-paced tech startup; fintech, banking, or compliance-adjacent environments strongly preferred given regulatory context
Demonstrated understanding of IT internal controls, including separation of duties, access privilege management, and audit trail requirements
Strong macOS proficiency required; working knowledge of Windows, Linux, iOS, and Android
Hands-on expertise with Jamf, Kandji, or comparable MDM platforms
Experience managing broad asset inventories beyond endpoints — including virtual infrastructure, SaaS, and non-traditional assets
Experience with IAM, MDM, and SaaS management tooling
Familiarity with IAM concepts and cloud platforms (AWS, GCP, or Azure)
Programming experience in Python or TypeScript strongly preferred
Familiarity with standard security and compliance frameworks (NIST, CIS, ISO) and how they translate into operational controls
Strong problem-solving skills with a bias for action, ownership, and comfort operating in high-velocity, high-accountability environments

Nice To Haves

Security certifications encouraged

Responsibilities

Provide day-to-day IT support to employees and contractors via a support queue, serving as a primary point of contact for IT operations
Own and implement a comprehensive asset management program covering endpoint devices, virtual infrastructure, cloud assets, domains, certificates, and IoT devices
Establish and maintain a codified, periodic inventory reconciliation process across discovery tools (e.g., Torii, MDM) to ensure accuracy and completeness
Manage software license lifecycle including tracking, renewals, and disposition planning
Deploy, configure, and maintain endpoint management solutions with a strong focus on macOS and Jamf
Manage and support core SaaS platforms including Okta, Salesforce, and MDM tooling
Assist with application onboarding for contractors and new employees
Help define and document IT Support policies including scope, service levels, escalation procedures, and separation of duties controls
Ensure job functions and access privileges are explicitly mapped to control responsibilities and documented accordingly
Write scripts and build automation (Python or TypeScript) to reduce manual IT workload, enforce controls, and improve operational efficiency; contribute to and polish existing IT bots
Work with application and software engineers to implement continuous improvement, automation, and system upgrades
Aid in the creation and maintenance of IT policies and standard operating procedures that meet regulatory and audit requirements