IT and Data Security Specialist

Demandlane; United States; Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Remote-first culture

Ownership of high-visibility security/

Growth opportunities

Job summary

DemandLane is seeking an IT Specialist / Data Security Specialist to join a high-impact engineering team focused on the US market. This senior, hands-on role owns IT, security, and access management for the company, operating with independent judgment to improve systems.

The position involves end-to-end lifecycle management, MVVM hardening, VPN, cloud IAM, and alertable security operations. You will work asynchronously across time zones with US overlap hours in a fast-paced, remote-first

Qualifications

• 4+ years in an IT Specialist or similar role supporting a distributed team.
• Hands-on macOS, Linux, and Windows environments.
• Least privilege, MFA enforcement, and endpoint hardening.
• Secrets and credential management (password managers, API keys, rotation).
• AWS and/or GCP IAM and access control.
• DNS and Cloudflare.
• Security audits with remediation plans.
• User lifecycle management across SaaS platforms.
• VPN setup and management.

Responsibilities

• Run full user lifecycle across core SaaS platforms, cloud environments, code repositories, VPN, password manager, and AI tools with audit trails.
• Set up and maintain macOS, Linux, and Windows devices remotely.
• Manage MDM/UEM and endpoint security for all devices accessing company data.
• Manage VPN and network access controls.
• Manage IAM, Security Groups, firewall rules, and access reviews in AWS/GCP.
• Manage secrets, API keys, tokens with rotation and revocation.
• Review cloud storage (e.g., S3) for public exposure and retention policies.
• Govern access to AI/LLM tools and data, including PII redaction.
• Lead vulnerability and dependency management with engineering partners.
• Plan and run security audits and drive remediation.
• Lead response to access and security incidents.

Skills

IT Security

MFA enforcement

Endpoint hardening

AWS IAM

GCP IAM

DNS

Cloudflare

Vulnerability audits

Bash scripting

Python

PowerShell

Okta

Tools

JumpCloud

Jamf

Intune

Job description

IT Specialist / Data Security Specialist

Location: 100% Remote (Indonesia/Romania/India)
Role Type: Full-time

About The Role:

We are looking for an IT Specialist / Data Security Specialist to join our high-impact engineering team, which is focused on the US market. This is a senior, hands-on role, not a helpdesk position. You will own IT, security, and access management for the company, operate with independent judgment, and proactively improve systems rather than react to issues.

Responsibilities

• Run the full user lifecycle (onboarding and offboarding) across core SaaS platforms, cloud environments, code repositories, VPN, the password manager, and AI tools, using a documented checklist and audit trail.
• Set up and maintain macOS, Linux, and Windows devices remotely.
• Manage MDM/UEM and endpoint security for all devices that access company data, including full-disk encryption.
• Manage VPN and network access controls.
• Manage AWS/GCP IAM, Security Groups, firewall rules, and access reviews.
• Manage secrets, API keys, and tokens (storage, rotation, and revocation).
• Review cloud storage (e.g., S3) for public exposure and enforce data retention policies.
• Govern access to AI/LLM tools and the data sent to them, including PII redaction.
• Own vulnerability and dependency management in partnership with engineering.
• Manage DNS and Cloudflare (records, proxying, WAF).
• Plan and run security audits and drive remediation.
• Lead response to access and security incidents (credential leaks, data exposure, compromised accounts).
• Design secure, restricted work environments for teams that handle sensitive data.
• Run phishing and social-engineering awareness training.
• Own SOPs, runbooks, and KB articles.
• Maintain audit trails and data access governance.
• Complete client and vendor security questionnaires and maintain the supporting evidence.

Requirements

• 4+ years in an IT Specialist or similar role supporting a distributed team.
• Hands-on macOS, Linux, and Windows.
• Least privilege, MFA enforcement, and endpoint hardening.
• Secrets and credential management (password managers, API keys, rotation).
• AWS and/or GCP IAM and access control.
• DNS and Cloudflare.
• Security audits with actionable remediation plans.
• User lifecycle management across SaaS platforms.
• VPN setup and management.
• Strong documentation skills, including guides that non-technical teammates can follow.
• Strong written English and comfort working asynchronously across time zones.
• Sound judgment and discretion when handling privileged access and sensitive data.
• Should be comfortable working with US Overlapping hours

Preferred Skills

• MDM/UEM (JumpCloud, Jamf, Intune).
• Zero-trust tools (Tailscale, Cloudflare Access).
• SSO/IdP (Okta, Google Workspace, Entra ID).
• Scripting (Bash, Python, PowerShell).
• Vulnerability scanning tools (Nessus, Qualys).
• Terraform or CloudFormation.
• SOC 2/ISO 27001 exposure.
• Experience completing client or vendor security questionnaires.

What We Offer

• Competitive, performance-linked compensation - we pay for impact.
• Opportunity to work alongside experienced leaders
• Ownership of a high-visibility engineering function with real strategic influence.
• A fast-moving environment where your ideas ship quickly and your growth is real.
• Remote-first flexibility with a collaborative, high-agency culture.