IT Engineer

We’re looking for an IT Engineer to join our growing IT team. This is a hands-on, high-ownership role sitting alongside our IT Support function. You’ll be both a builder and a doer. You’ll architect and drive the systems that underpin how our team works, while staying deeply connected to the day-to-day realities of on-site infrastructure.

We’re looking for a self-starter to lead our major IT initiatives that will enable the company to grow and scale gracefully. This work includes zero-touch deployment for Windows and macOS, BYOD support for mobile devices, context-aware device access policies, and implementing controls to facilitate compliance with an established security framework. You’ll also serve as an escalation point and mentor for our team of IT Support Specialists, and act as a subject matter expert in our physical office technology — from access control to printers to patch panels.

This is an on-site role in our Portland office. You should be comfortable operating at multiple levels: one day you’re writing configuration profiles to automate workstation security, the next you’re installing A/V equipment and running patch cables.

Endpoint Management & Zero Touch Deployment

Administer our MDM platforms (Microsoft InTune, JumpCloud) for Windows and macOS devices, including enrollment, configuration profiles, compliance policies, and application delivery

Architect and execute our zero touch provisioning rollout (Windows Autopilot and Apple Business Manager/Automatic Device Enrollment), eliminating manual imaging for new device deployments

Audit device enrollment and ensure 100% compliance across all devices in our MDM platforms

Design and implement BYOD policies and enrollment workflows, enabling secure access from personal devices

Identity & Access Management

Administer Microsoft Entra ID, including user lifecycle, group management, dynamic membership rules, and Conditional Access policies

Implement and refine context-aware access controls — tying device compliance posture, identity signals, and location to resource access

Manage SSO integrations and application provisioning via SCIM and SAML across our SaaS stack

Help implement our zero trust roadmap and translate policy into enforceable technical controls

On-Site & Physical Infrastructure

Own day-to-day operation and expansion of our physical office technology: building access control systems, badge readers, and door hardware

Deploy, configure, and maintain printers and print management infrastructure across office locations

Manage physical network infrastructure including switch configuration, cable patching, and troubleshooting wired and wireless connectivity issues

Participate in office build-outs and capital projects, coordinating physical IT infrastructure for new or renovated spaces

Partner with facilities and vendors on A/V systems, conference room technology, and infrastructure projects

Security & Compliance

Support adoption of a compliance framework (e.g., NIST or equivalent), translating requirements into concrete IT controls and documentation

Develop and enforce endpoint security baselines, patch management cadences, and device health policies

Collaborate with leadership to draft and operationalize infosec policies, including acceptable use, access control, and incident response procedures

Monitor and respond to endpoint telemetry and security alerts, working with relevant stakeholders on remediation

Help Desk Escalation & Team Mentorship

Serve as the primary escalation point for our IT Support Specialist on complex technical issues across hardware, software, and identity

Provide mentorship, guidance, and structured knowledge transfer to grow the support team’s capabilities

Review and improve ticketing workflows, documentation standards, and knowledge base content in Confluence and Jira Service Management

Set technical direction for scalable support processes that can grow with the team

Experience administering endpoint management for mixed Windows/macOS environments (MDM, device compliance, app deployment)

Experience managing identity and access in a modern IdP (user lifecycle, group policy, conditional/context-aware access)

Practical networking and on-site IT skills (switching/Wi-Fi basics, cabling/patching, troubleshooting in a real office)

Ability to write clear documentation and turn policies into concrete, enforceable technical controls

Comfort working across abstraction layers—designing systems one day, swapping hardware the next

Experience administering a modern MDM solution, such as InTune, Jamf, JumpCloud, Inu, etc.

Experience administering a modern IdP solution, such as Microsoft Entra ID, Okta, or Google Workspace

Experience implementing SSO and provisioning integrations (SAML, SCIM) across SaaS tools

Familiarity with zero trust concepts and how they translate into endpoint and identity controls

Experience supporting or implementing a security/compliance framework (NIST, ISO 27001, SOC 2, or equivalent)

Experience with endpoint telemetry and responding to security alerts (triage, remediation, root cause)

Experience owning access control systems, conference room/AV setups, and vendor coordination for office IT projects

If hired for this full-time role, you will receive:

Cash compensation of $120,000 - $160,000

Equity in the company. We’re all owners and if we’re successful, this equity should be far and away the most valuable component of your compensation.

A benefits package that helps you take care of yourself and your family, including:

Flexible paid time off

Health insurance (the company pays 100% of gold level PPO plan for full time employees, their partners, and dependents)

Dental insurance (the company pays 100% for full time employees and 100% for their partners and dependents)

Vision insurance (the company pays 100% for full time employees, their partners, and dependents)

Disability insurance (the company pays 100% for a policy to provide long term financial support if you become disabled)

Ability to contribute to tax-advantaged accounts, including 401(k), health FSA, and dependent care FSA

Relocation assistance to facilitate your move to Portland (if needed).