IT and Security Generalist

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for an IT and Security Generalist based in the United States. This role combines IT administration, security operations, automation, and application security in a highly automated environment. You will help operate and improve systems covering identity, endpoints, workforce tooling, and security monitoring. Rather than focusing on high-volume ticket handling, you will investigate exceptions, strengthen workflows, and automate recurring processes. The position offers broad exposure across IT and security while providing a clear path toward a future Security Engineer specialization. You’ll work closely with a small, collaborative team that values ownership, documentation, and reliable production outcomes. This is a full-time remote opportunity reporting to the Head of IT and Security. This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for an IT and Security Generalist based in the United States. This role combines IT administration, security operations, automation, and application security in a highly automated environment. You will help operate and improve systems covering identity, endpoints, workforce tooling, and security monitoring. Rather than focusing on high-volume ticket handling, you will investigate exceptions, strengthen workflows, and automate recurring processes. The position offers broad exposure across IT and security while providing a clear path toward a future Security Engineer specialization. You’ll work closely with a small, collaborative team that values ownership, documentation, and reliable production outcomes. This is a full-time remote opportunity reporting to the Head of IT and Security. Accountabilities: Administer identity systems, including users, groups, applications, and device trust, while managing the macOS device fleet through the organization’s MDM platform. Monitor and refine automated employee onboarding and offboarding workflows, investigate exceptions, and maintain reliable lifecycle processes. Maintain and extend automation supporting lifecycle management, security monitoring, reporting, and LLM-assisted triage workflows. Build automation for recurring manual processes, monitor workflows after deployment, troubleshoot failures, and retire solutions that are no longer needed. Respond to security alerts from endpoint, cloud, and identity systems within defined SLAs; investigate and document security events and escalate incidents according to established procedures. Support vulnerability management by reviewing findings, coordinating remediation with engineering teams, and reporting progress. Participate in application security reviews covering engineering changes, integrations, authentication, authorization, and data-handling practices, helping establish secure defaults early in the development process. Maintain automated audit evidence collection and investigate gaps, while preparing additional evidence for SOC 2 and HITRUST assessments when required. Provide workforce support for access or system issues that require human judgment beyond automated helpdesk processes, and create clear end-user documentation. Document decisions, changes, and status updates; test changes before production deployment and continuously improve operational processes. Requirements 4–5 years of experience in fast-moving IT, security operations, systems administration, or equivalent demonstrated experience. Working knowledge of identity and access management platforms such as Okta, along with practical macOS administration experience. Some scripting experience and a solid understanding of scripting fundamentals, with exposure to or strong interest in workflow automation tools, APIs, LLMs, and GenAI. Familiarity with core security concepts including authentication, least privilege, logging, security monitoring, and incident response. Clear and concise written communication, with the ability to explain problems, decisions, and status updates effectively. Strong ownership and accountability, including monitoring systems, addressing issues promptly, and ensuring that solutions remain reliable after deployment. Good judgment about when to act independently and when to seek guidance, with a proactive approach to communicating blockers and discussing important decisions. Exposure to HIPAA, SOC 2, or HITRUST environments is a plus. Experience with AWS or GCP administration, EDR, SIEM, or cloud security monitoring tools is desirable. A completed or in-progress security certification is also advantageous. Benefits Annual compensation of $110,000–$120,000 , based on prior experience, performance, and market factors. Eligibility for a 10% annual bonus . Medical, dental, and vision insurance. Flexible Spending Account (FSA). Health Savings Account (HSA) with employer match. Company-paid short-term and long-term disability, AD&D, and life insurance. Paid family leave. 401(k) with employer match. Paid time off. Full-time remote work within the United States. Broad exposure across IT, automation, security operations, and application security, with a defined development path toward a Security Engineer role. How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best! Why Apply Through Jobgether? Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time. #LI-CL1