IT Manager

TrueFoundry; Bengaluru; On-site; INR 2,800,000 - 4,500,000; Full time

Job summary

Truefoundry in Bengaluru seeks an experienced IT and security leader to own corporate IT and controls for ~150 people. You will configure, script and fix things across Google Workspace, Okta, and cloud IAM, supporting SOC 2, ISO 27001, HIPAA audits.

You will manage the Mac-first fleet via MDM, run security awareness training, and handle incident response, offboarding, and vendor reviews to keep all identity and devices audit-ready.

Qualifications

• 7+ years in IT operations, incl. 3+ at a SaaS/tech firm of 100–500 people.
• Hands-on Google Workspace admin.
• Hands-on IdP experience: Okta or similar (SAML, OIDC, SCIM).
• Mac MDM experience with Jamf, Kandji, Mosyle or Intune; plus an EDR tool.
• Experience supporting SOC 2 or ISO 27001 audits with evidence (preferably via Vanta).
• Knowledge of AWS, GCP, or Azure IAM for cloud access and SSO.
• Scripting ability in Python, Bash, or Apps Script and good writing.

Responsibilities

• Own identity and access management across Google Workspace, Okta, and SaaS apps.
• Automate joiner/mover/leaver processes with HR and ensure revocation in 24 hours.
• Manage Mac-first fleet via MDM; ensure encryption, patching, EDR, remote wipe.
• Maintain asset inventories and track SaaS licences; curb shadow IT.
• Oversee IT vendor reviews with GRC lead; ensure audit readiness.
• Keep integrations healthy and mapping accurate; run access reviews for audits.
• Conduct security awareness training and phishing simulations.
• Handle IT helpdesk and document runbooks to scale.
• Manage office and remote network security, zero-trust, VPN, guest isolation.
• Assist incident response, backups, and business continuity testing.
• Script repetitive tasks using GAM, Google Apps Script, Python, Bash.

Skills

Google Workspace admin

IdP / SSO (Okta)

Mac MDM administration

SOC 2 / ISO 27001 audit support

Cloud IAM (AWS/GCP/Azure)

Scripting: Python / Bash / Apps Script

Technical writing / runbooks

Tools

Jamf / Kandji / Mosyle / Intune

Vanta / audit tools

Cloudflare / Zscaler / security tools

GAM / Google Apps Script APIs

Job description

About the role

Our customers expect us to meet SOC 2, ISO 27001, GDPR, HIPAA and ISO 42001. You will be our first IT hire and will own corporate IT and IT security end-to-end for ~150 people: identity, devices, SaaS, and the IT controls auditors test. This is a builder role. You will configure, script and fix things yourself.

What you will do

• Own Google Workspace administration: org units, groups, security settings, DLP, context-aware access, email security (SPF, DKIM, DMARC).
• Run identity and access in Okta and 1Password: SSO and enforced MFA for every SaaS app (Cloudflare, Slack, GitHub, cloud consoles), role-based access, privileged access, and quarterly access reviews with evidence.
• Automate the joiner, mover and leaver process with HR, so offboarding removes all access within 24 hours.
• Manage the Mac-first fleet (plus some Windows/Linux) through MDM: enrollment, disk encryption, OS patching, screen lock, EDR, and remote wipe.
• Keep a complete asset inventory and SaaS inventory; find and remove shadow IT; manage licences and IT spend.
• Own IT vendor management and security reviews of IT tools together with the GRC Lead.
• Keep the Google Workspace, Okta, 1Password, Slack, GitHub, Cloudflare and MDM integrations healthy; keep personnel and account mapping accurate; run Vanta access reviews; and keep every identity, device and offboarding test passing as audit evidence for SOC 2, ISO 27001, ISO 27701 and HIPAA.
• Run security awareness training and phishing simulations; track completion.
• Handle IT helpdesk and onboarding; write runbooks so it scales.
• Own office and remote network security: Wi-Fi, firewall, VPN or zero-trust access, and guest isolation.
• Execute IT parts of incident response, backup and business continuity tests.
• Script repetitive work (Google Apps Script, Python, Bash, GAM, MDM APIs).

What you must have

• 7+ years in IT operations, 3+ of them at a SaaS or tech company of 100–500 people.
• Hands-on, expert-level Google Workspace admin.
• Hands-on with Okta (or a similar IdP such as JumpCloud or Entra ID): SAML, OIDC, SCIM provisioning.
• Hands-on Mac MDM (Jamf, Kandji, Mosyle or Intune for macOS), plus an EDR tool.
• Have supported at least one SOC 2 or ISO 27001 audit and produced evidence yourself, ideally through Vanta (Drata or Secureframe is acceptable if you can ramp on Vanta in the first month).
• Working knowledge of AWS, GCP or Azure IAM, enough to manage console access and SSO into cloud accounts.
• Scripting in at least one of Python, Bash, or Apps Script.
• Clear writing: you document what you build.

Nice to have

• Has used the Vanta agent, Vanta access reviews or Vanta personnel onboarding/offboarding workflows.
• Certifications: Google Workspace Administrator, Jamf 200/300, CompTIA Security+, ISO 27001 Lead Implementer.
• Experience with zero-trust access (Cloudflare, Tailscale, Zscaler) and SaaS security posture tools.