Overview
Own Yuno's corporate IT stack end to end for a fully remote, global team, covering device management, identity, SaaS administration, security and compliance, and automation.
What you'll do
- Own the MDM platform (Jamf, Intune, or Kandji) for a distributed macOS and Windows fleet, including zero-touch provisioning, patching, configuration-as-code, and endpoint security.
- Administer the identity provider (Okta or equivalent), SSO, MFA, and SCIM; automate onboarding and offboarding and enforce least-privilege access across every system.
- Manage the SaaS stack (Google Workspace, Slack, Atlassian, and more), rein in shadow IT and OAuth risk, and right-size licenses and access.
- Build and maintain the controls, access reviews, and audit evidence that keep Yuno compliant with SOC 2, PCI DSS, and ISO 27001, partnering with Security on vendor reviews.
- Replace manual work with scripting and workflow automation (Python, Okta Workflows, or similar) and drive the corporate IT roadmap as the company scales.
- Act as the senior escalation point for complex IT issues, maintain clear runbooks and documentation, and mentor the IT team.
- Build AI-driven automation for IT and helpdesk, turning repetitive requests and lifecycle workflows into self-serve flows, and maintain machine-readable documentation that AI assistants can act on.
- Own how AI tools are provisioned, secured, and governed across the organization, managing access and OAuth/shadow-AI risk.
What you'll need
- 5+ years in corporate IT, IT operations, or IT systems engineering, ideally supporting a distributed workforce.
- Hands-on MDM expertise with Jamf Pro, Intune, or Kandji for macOS and Windows fleet management.
- Experience managing an identity provider (Okta strongly preferred), SSO, MFA, and provisioning/deprovisioning.
- SaaS administration experience with Google Workspace, Slack, Atlassian, or similar, with an understanding of SaaS and OAuth governance.
- Hands-on support for security and compliance frameworks such as SOC 2, ISO 27001, or PCI DSS, including access reviews and audit evidence.
- Scripting and automation skills in Python, JavaScript, PowerShell, or workflow tools to eliminate manual toil.
- Networking fundamentals: TCP/IP, DNS, DHCP, and VPNs.
- Advanced English proficiency, written and spoken.
Nice to have
- Building AI-driven IT automation (e.g., Console.com, Risotto, Unthread) or helpdesk and agentic tooling.
- Hardware lifecycle and asset management (ITAM) at scale.
- Experience in the payments or fintech industry, where compliance and access controls are stricter.
- Familiarity with Zero Trust, PAM, and least-privilege access models.
- Configuration-as-code for endpoints (an infrastructure-as-code mindset for IT).
- Experience securing and governing AI tools or agents across an organization.
- Spanish proficiency.
Details
- Fully remote role; the company is described as remote, with a home office bonus and work equipment provided.
- Full-time, individual contributor position.
Read the full description and apply on the company’s own careers page.