Hands-On IT Infrastructure Lead — Azure & Security

Generate; San Francisco (CA); On-site; USD 160,000 - 190,000; Full time

Job summary

Generate Capital is seeking an IT Manager to own the IT infrastructure end to end, spanning Azure, M365, identity, network, endpoints, and security tooling. This hands-on role requires deep technical ownership with no direct reports today.

You will work across on-prem and cloud, manage budgets, and drive the IT roadmap, including audit and regulatory considerations, in collaboration with Compliance and our security partner.

Qualifications

• 7-10 years of progressive experience across IT infrastructure, systems engineering, and IT operations, including time as the senior technical owner of an environment.
• Deep, hands-on experience administering Microsoft Azure, including virtual networking, compute, storage, backup, and native security services.
• Deep, hands-on experience across the Microsoft 365 and identity stack, including Entra ID, Exchange Online, SharePoint, Teams, conditional access, and Intune.
• Practical experience running Windows Server and Active Directory in a hybrid environment.
• Working knowledge of office networking, including switching, wireless, VLANs, DNS, DHCP, VPN, and firewall administration; hands-on Ubiquiti experience is a plus.
• Demonstrated ownership of cybersecurity operations and controls, including EDR, vulnerability management, and identity security.
• Track record of managing third-party providers and MSPs — holding them to SLAs, escalating effectively, and knowing when a partner needs to change.
• Comfort operating as a hands-on individual contributor with broad ownership and no team beneath you.
• Scripting and automation ability, particularly PowerShell.
• Experience in financial services, investment management, or another regulated environment is advantageous.
• Azure certifications (AZ-104, AZ-500) or comparable Microsoft certifications are preferred.
• Ability to organize time and prioritize tasks independently.
• Unimpeachable integrity and glowing references.
• Outstanding communication and interpersonal skills, including empathy, intuition, and listening as well as strong writing and documentation skills.
• High level of self-awareness and humility, with excitement about confronting uncomfortable situations or new challenges.
• Intellectual agility, curiosity, and creativity; problem-solving is your default mode.
• Entrepreneurial spirit: flexibility, comfort with risk, recognition that perfect can be the enemy of the good.

Responsibilities

• Own Microsoft Azure environment end to end, including virtual networking, virtual machines, storage, backup, monitoring, patching, and cost management.
• Administer and continuously improve Microsoft 365 and identity platform, including Entra ID, Exchange Online, SharePoint, Teams, conditional access, MFA, and license management.
• Own endpoint management and hygiene across Windows and macOS through Intune and MDM tooling — compliance policies, configuration profiles, patching, imaging, and application lifecycle.
• Own cybersecurity operations and controls, including endpoint detection and response, vulnerability and patch management, email security, data protection, and identity security, with our security partner.
• Design, deploy, and maintain office network infrastructure across locations, including Ubiquiti switching and wireless, firewalls, VPN, and Azure networking.
• Serve as the Tier 3 escalation point for our third‑party support partner, and manage that relationship across SLAs, escalations, quality, and scope.
• Own the IT infrastructure roadmap and budget, and make the build‑versus‑buy and vendor‑versus‑in‑house calls that go with it.
• Partner with the VP, Data & Technology on planning, spend, and sequencing of infrastructure investment.
• Manage IT vendors and third parties, including AV and conference room support partner, and own the technical side of vendor evaluation, onboarding, performance, and oversight.
• Administer core business applications including Slack and the Microsoft platform, and support the evaluation and rollout of new tools as the business adopts them.
• Support IT controls and evidence in service of audit, cyber‑insurance, and regulatory requirements, partnering closely with Compliance and our security partner.
• Automate and script routine provisioning, maintenance, and reporting tasks using PowerShell and native Microsoft tooling.
• Actively create and maintain documentation of our systems, configurations, and runbooks.
• Provide hands‑on support to Generate’s userbase where senior expertise or escalation is genuinely required, including executive support.

Skills

Azure administration

PowerShell scripting

Vendor management

Cybersecurity operations

Documentation

Tools

Intune

Entra ID

CrowdStrike

Office 365 administration

Job description

Generate Capital is seeking an IT Manager to own the IT infrastructure end to end, spanning Azure, M365, identity, network, endpoints, and security tooling. This hands-on role requires deep technical ownership with no direct reports today.

You will work across on-prem and cloud, manage budgets, and drive the IT roadmap, including audit and regulatory considerations, in collaboration with Compliance and our security partner.