Senior IT Operations Engineer (Dublin, CA)

SavvyMoney•Dublin, CA

1d•Hybrid

About The Position

SavvyMoney is a leading San Francisco East Bay fintech company providing integrated credit score and personal finance solutions to over 1,600 bank and credit union partners. Recognized as a Top 25 Place to Work and an Inc. 5000 Fastest Growing Company, SavvyMoney is seeking a Senior IT Operations Engineer. This senior individual-contributor role reports to the Senior Manager, IT Operations and is responsible for endpoint and workplace engineering (Windows and macOS), IT security operations and SOC 2 compliance support (including physical access control), and forward-deployed technical support for partner inquiries, as well as AV and media production for live and hybrid events. The role requires operating across these three domains with minimal direction, and all systems touched carry a compliance obligation due to SavvyMoney's status as a financial services company operating under FCRA, GLBA, and SOC 2. The priority order for competing demands is: active security incident, then partner-impacting escalation, then scheduled live event, then routine endpoint work.

Requirements

7+ years of experience in IT systems engineering, enterprise IT support, cloud administration, or AV systems design.
Genuine dual-platform depth: at least three years managing a macOS fleet at scale with MDM (Kandji, Jamf, or Mosyle) and at least three years managing a Windows fleet with Intune and Entra ID. Deep experience in one platform with passing familiarity in the other is not sufficient for this role.
Hands-on Okta administration experience rather than end-user familiarity: SSO, SCIM provisioning, MFA policy, and lifecycle automation.
Proficiency in enterprise IT tools, including Google Workspace, Microsoft 365, Jira, Confluence, AWS, Kandji, Intune, and PagerDuty.
Experience with network administration and security best practices, including VPNs, firewall configuration, and endpoint security.
Experience managing building security technologies, including access control systems and video surveillance.
Participation in a full SOC 2 audit cycle as a control owner or evidence provider.
Demonstrated experience in an externally-facing technical role such as support engineering, solutions engineering, forward-deployed engineering, or implementation, with the ability to hold a technical conversation with a partner or customer stakeholder.
Working proficiency in automation and scripting with PowerShell, Bash, and Python.
Experience with video production, camera operation, and editing (Adobe Premiere, Final Cut Pro, DaVinci Resolve).
Proficiency in podcast production, including multi-track audio editing and publishing.
Understanding of video conferencing platforms and live streaming technologies (OBS, vMix, Wirecast, ATEM Mini).
Experience setting technical standards and mentoring junior IT staff.
Strong problem-solving and analytical skills with the ability to exercise discretion and independent judgment.
Excellent communication and collaboration skills for cross-functional projects.
Candidates must be legally authorized to work in the United States on a full-time basis without the need for employer sponsorship now or in the future.

Nice To Haves

Fintech, lending, or financial services background, or other regulated-industry experience with FCRA, GLBA, or SOC 2 obligations.
Experience supporting a light Linux endpoint footprint.
Experience with Zero Trust network access and device-posture-based conditional access.
Relevant certifications such as Okta Certified Administrator, Microsoft 365 Certified Endpoint Administrator Associate, Apple Certified Support Professional, CompTIA Security+, or ITIL Foundation.
Bachelor's degree in a relevant field, or compelling self-taught equivalent.

Responsibilities

Own the Windows fleet end to end: Intune and Entra ID enrollment, Autopilot provisioning, configuration and compliance policies, Windows Update rings, BitLocker, and Defender for Endpoint.
Own the macOS fleet end to end: Kandji, zero-touch Automated Device Enrollment, Blueprints, Platform SSO, FileVault key escrow, Gatekeeper and XProtect posture, and the macOS major-version upgrade cadence.
Maintain parity between the two platforms: one security baseline, one patch SLA, one app catalog, one onboarding experience, and one experience whether the user is on a PC or a Mac.
Support the light Linux endpoint footprint used by engineering, including baseline hardening, patching, and disk encryption.
Package, test, and deploy software to both fleets, and maintain a self-service app catalog.
Serve as the highest escalation tier for endpoint issues: the person who resolves what the service desk cannot.
Own IT asset lifecycle from procurement through certified data destruction, including BYOD enrollment and same-day offboarding wipe.
Automate endpoint operations with PowerShell, Bash, and Python against MDM and identity APIs.
Eliminate manual repetition rather than documenting it.
Provide white-glove, hands-on support to employees and executive staff across all platforms.
Administer identity and access management in Okta: SSO, SCIM provisioning, phishing-resistant MFA, application assignment, lifecycle automation, and access-review evidence.
Deploy and administer the enterprise system estate, including Google Workspace, Microsoft 365, AWS, Jira, and Confluence.
Own IT onboarding and offboarding end to end: account provisioning, group membership, device assignment, badge issuance, and same-day revocation of all access on departure.
Enforce least privilege across all enterprise systems.
Run periodic access reviews and remove standing privilege.
Triage and respond to endpoint and identity security alerts including phishing, malware, and suspected account compromise, escalating to Information Security per the incident response plan.
Own the IT portion of SOC 2: evidence collection, control testing, change and ticket records, and audit walkthroughs for endpoint, identity, and physical security controls.
Maintain documentation for security controls, policies, and procedures mapped to SOC 2, and keep control ownership current.
Maintain corporate network security controls: VPN and ZTNA access, 802.1X, firewall rules, DNS filtering, and network segmentation for guest and IoT devices.
Operate building security systems: electronic door locks, access control, video surveillance, badge management, visitor tracking, and camera retention aligned to policy.
Provision and revoke physical access in lockstep with logical access: same trigger, same day.
Handle consumer and partner data only in approved systems, and escalate any suspected exposure immediately.
Act as the embedded technical resource for partner inquiries, working directly alongside Partner Success, Support, and Implementation to triage, reproduce, and resolve inbound technical questions from our bank and credit union partners.
Turn partner-reported symptoms into reproducible technical findings, and hand off to Engineering with logs, environment detail, and a clear reproduction path.
Join partner calls as the technical voice: explain root cause, remediation, and timeline in language a non-technical partner stakeholder can act on.
Own the issue to closure and confirm resolution with the partner rather than handing it off and moving on.
Build internal troubleshooting runbooks and partner-facing FAQ content from recurring inquiries, and push for the fixes that eliminate repeat tickets.
Work partner and consumer data strictly within approved systems under GLBA and FCRA obligations.
Design and configure AV systems, including conference rooms, digital signage, and live event production setups.
Support and optimize video conferencing solutions (Zoom, Microsoft Teams, Webex) for hybrid meetings.
Operate and maintain professional camera equipment, lighting, and audio systems.
Oversee post-production workflows, including video editing (Adobe Premiere, DaVinci Resolve) and podcast production (Audition, Audacity, Pro Tools).
Manage cloud-based media storage and develop AV standards for consistency and quality.
Integrate AI-driven enhancements to automate media processing and enable real-time captioning.
Provide real-time IT and AV support for corporate meetings, webinars, and hybrid events.
Troubleshoot and resolve AV and IT issues during live productions and critical operations.
Ensure high-quality streaming and broadcasting for executive presentations and company-wide events.
Manage IT ticketing systems and service desk operations for timely issue resolution.
Own and maintain SLAs for IT support and infrastructure services, and hold the function to them.
Track and report on IT service metrics including ticket resolution times, system uptime, and user satisfaction.
Apply ITIL practices for incident, problem, and change management.
Participate in the technical support on-call rotation, including after-hours coverage for outages, security events, and live productions.
Manage environmental monitoring for server rooms and network closets, including temperature, humidity, and power.
Coordinate with facilities vendors on IT infrastructure such as structured cabling, power, and HVAC.
Maintain UPS systems, backup power, and critical infrastructure.
Manage physical IT infrastructure, including server racks, cable management, and network distribution.
Create and maintain IT documentation, including system diagrams, runbooks, SOPs, and knowledge base articles.
Develop and deliver Lunch & Learn sessions on IT tools, security best practices, and new technologies.
Build automation that eliminates repetitive tasks, and document what you build so others can run it.
Set technical standards for the IT function and mentor junior IT staff on endpoint, identity, and security practice.
Lead IT projects including system implementations, infrastructure upgrades, and technology rollouts.
Develop project plans with timelines, task dependencies, resource requirements, and risk mitigation strategies.
Track project progress using project management tools (Jira, Asana) and provide regular status updates.
Manage project documentation, including requirements, design specifications, test plans, and deployment guides.
Coordinate user acceptance testing and training for new systems.
Manage vendor deliverables and timelines for externally-managed projects.