TechOps Engineer

Candid Health•Denver, CO

11d•$110,000 - $165,000•Hybrid

About The Position

In this role, you won't just be closing tickets, you'll treat our internal IT infrastructure as a product, building automated systems that enable our teams to tackle some of the hardest problems in the US healthcare system. At Candid, we view Technical Operations not as a traditional corporate cost center, but as an engineering discipline and a driver of business value. You will balance day-to-day user support with deep project work, have a direct say in the tools we use, and work closely with Corporate Security and People Ops to scale our environment.

Requirements

4+ years of hands-on Technical Operations or IT experience, ideally honed in a fast-paced tech startup or a high-volume Managed Service Provider (MSP) environment.
Deep technical troubleshooting skills across macOS and hands-on experience managing Apple MDM tools (Jamf, Kandji, etc.) and packaging workflows (AutoPkg).
Highly autonomous and naturally biased toward action. When you see a manual task done twice, your first instinct is to script or automate it out of existence.
Ability to treat internal employees as customers and seamlessly translate complex security or technical changes to non-technical stakeholders.
Natural inclination to think about compliance, data protection, and secure offboarding processes to keep patient data completely safe.

Responsibilities

Scale Onboarding & Offboarding: Own and automate the end-to-end operational lifecycle for employees, optimizing our current processes so they can seamlessly scale as our team grows.
Execute High-Impact Projects: Lead immediate critical initiatives including migrating our Apple MDM platforms, perfecting a frictionless Zero-Touch Enrollment pipeline, and building Just-in-Time (JIT) access automation.
Endpoint & App Management: Set up and maintain secure endpoint configurations for workstations and mobile devices using Apple MDM (Jamf/Kandji), AutoPkg, and complementary security software.
Enforce Zero Trust Security: Securely implement and manage critical business applications, ensuring modern zero-trust enforcement via SSO, SAML, and MFA.
Root-Cause Troubleshooting: Investigate why things break. We value curiosity and fixing core infrastructural issues over applying quick, repetitive patches.
Collaborate Across Teams: Work closely with stakeholders in Engineering, Security, and People Operations to deliver tools and processes that make their work safer and easier.