Responsibilities

End-User Support & IT Operations

• Primary internal point of contact for all hardware, software, connectivity, and access issues across on-site and remote employees
• Own the MSP relationship: define what goes to them, hold them to SLAs, and escalate appropriately — you are the bridge, not the bottleneck
• Manage the full device lifecycle: procurement, imaging, deployment, and decommissioning across a ~45-device corporate fleet
• Administer Microsoft 365: Entra ID, Exchange Online, SharePoint, Teams, OneDrive, and associated licenses
• Own IT onboarding and offboarding workflows, account provisioning, device assignment, access revocation, and litigation hold procedures; this process must be airtight and documented
• Maintain a current IT asset inventory

Cybersecurity & Information Security

• Own the organization's day-to-day security posture; engage the MSP for complex security projects and escalations
• Administer endpoint protection, patch management, MFA enforcement, and conditional access policies
• Monitor M365 security and compliance tooling: Purview, Defender for Business, audit logs
• Conduct periodic access reviews and permission audits; produce findings reports for COO
• Lead first-response on security incidents , containment first, investigation second and coordinate MSP escalation where needed; this includes employee departure scenarios involving potential data exfiltration
• Manage email authentication controls (SPF, DKIM, DMARC) and anti-phishing policies

Lab & Instrument IT

• Maintain network connectivity for laboratory instruments and manage isolated VLANs where required
• Serve as the IT interface for lab instrument vendors and cloud-connected instrument platforms
• Keep instrument computing hardware and software licenses current in coordination with R&D and Manufacturing

Access & Device Governance

• Deploy and administer an MDM solution across the full device fleet
• Own permissions governance for end-user systems: M365, SharePoint, shared drives, and SaaS applications
• Conduct quarterly access audits; report findings to COO
• Manage data lifecycle for off-boarded employees including legal preservation requirements

Cloud Cost & Vendor Management

• Monitor cloud and SaaS spend; surface optimization opportunities and eliminate unused licenses
• Manage all software subscriptions across office and lab environments, licenses, renewals, utilization tracking, and vendor relationships for both business software and laboratory-specific applications
• Coordinate with the Data Infrastructure Engineer on cloud access provisioning — you manage who has access, they manage the architecture
• Track IT vendor contracts and MSP deliverables; flag renewal dates and surface consolidation opportunities

IT Policy & Documentation

• Develop and maintain core IT policies: Acceptable Use, Data Classification, Password Policy, BYOD
• Document processes and configurations well enough that someone else could operate them

Qualifications

• 3–5 years of hands-on IT experience in a generalist role
• Microsoft 365 administration: Entra ID, Exchange Online, SharePoint, Intune/MDM
• Endpoint security: patch management, MFA/conditional access, Defender for Business or equivalent
• Experience managing network hardware: switches, enterprise Wi-Fi, firewall rules
• MDM deployment and administration experience (Intune, Jamf, or Kandji)
• Strong documentation discipline
• Clear communicator with both non-technical staff and external technical partners

Pay: $70,000.00 - $75,000.00 per year

Benefits:

• 401(k)
• 401(k) matching
• Dental insurance
• Health insurance
• Life insurance
• Paid time off
• Parental leave
• Relocation assistance
• Vision insurance

Work Location: In person