IT Engineer

Cyngn; Mountain View (CA); On-site; USD 120,000 - 180,000; Full time

Job summary

Cyngn Inc. in Mountain View, CA is seeking a hands-on IT Infrastructure Engineer to own identity, device fleet, and network automation onsite. You will reduce support volume by writing scripts, policies, and runbooks that prevent recurring tickets.

The role covers diverse environments including Linux engineering workstations, lab hardware, and test infrastructure, with occasional after-hours work for maintenance and office moves. Onsite with a small two-person IT team.

Qualifications

• 4-6 years in IT, with at least 2 years beyond frontline support in a systems, infrastructure, or IT engineering capacity
• Deep hands-on administration across macOS, Windows, and Linux, including Ubuntu in an engineering environment
• Production experience administering an identity or directory platform — JumpCloud— including group design, SSO integrations, and conditional access or MFA policy
• Strong Google Workspace administration, beyond creating and deleting users
• Working networking knowledge you can apply without supervision: VLANs, routing, firewall rules, DNS, DHCP, VPN, and Wi‑Fi design and troubleshooting
• Scripting for automation in Bash, PowerShell, or Python, and comfort working against vendor APIs
• Experience with MDM and

Responsibilities

• Own onboarding/offboarding across macOS, Windows, and Ubuntu and implement zero-touch where feasible
• Own the service desk as first contact for all support tickets and escalations
• Fully understand and master the IT asset lifecycle end to end: procurement, assignment, recovery, and retirement
• Implement a patch management program covering all personnel workstations
• Audit internal company resources and harden security posture
• Document and clean up network segmentation between corporate and engineering environments
• Build the internal knowledge base and measurably reduce top recurring ticket drivers
• Automate IT operations across onboarding/offboarding, endpoint provisioning, software deployment, and routine workflows with approvals and auditability
• Mature endpoint compliance and vulnerability management with patching and security baselines
• Strengthen identity and access management with least-privilege enforcement and periodic reviews
• Validate and improve backup, disaster recovery, and business continuity procedures with testing and remediation
• Deliver at least one infrastructure or security initiative with proper documentation

Skills

macOS admin

Windows admin

Linux admin

Scripting (Bash, PowerShell, Python)

Networking knowledge

IAM / MFA policy

Tools

JumpCloud

Google Workspace

Job description

About the role

You build IT infrastructure rather than just keep it running. This is a hands-on, fully onsite role in Mountain View, and you will be the second member of a two-person IT function supporting engineering, operations, and business teams.

That structure is the pitch and the catch. You own real systems from day one — identity, device fleet, network, and the automation that holds them together. You will also still unjam a printer, because two people means everyone is hands‑on.

What separates this from a help desk job is the mandate: your job is to reduce support volume, not absorb it. We want someone who sees the same ticket three times and writes the script, policy, or doc that stops the fourth.

Cyngn builds autonomous driving technology for industrial vehicles, so you will support a mixed environment of corporate laptops, Linux engineering workstations, lab hardware, and test infrastructure. If you have only ever supported a pure SaaS office, this will stretch you in a good way.

What you’ll do

• Administer and improve identity and access as a system: design and maintain groups, roles, policies, and MFA enforcement in JumpCloud and Google Workspace, and keep SaaS access consistent across Slack and the rest of the stack
• Administer and improve the device fleet: MDM policy, imaging and provisioning pipelines, patch and compliance reporting across macOS, Windows, and Ubuntu
• Automate the repetitive work — onboarding and offboarding, access provisioning, inventory reconciliation, reporting — with scripting and the APIs of the tools we already run
• Administer and contribute towards the office and engineering network: improve security and user experience
• Support engineering infrastructure, including Linux workstations and shared compute resources
• Ensure compliance of corporate endpoints and SasS services
• Own Tier 1 + 2 service desk tickets
• Evaluate and implement new tooling: run the trial, make the recommendation, own the rollout
• Write and maintain documentation and runbooks so recurring issues become self-service
• Conduct POCs of new solutions for the company
• Manage hardware and software inventory, license assignments, and renewal tracking

Occasional after-hours or weekend availability may be needed for planned work such as office moves, equipment refreshes, network changes, or system maintenance.

Priorities: 3-12 Month Goals

_ First 3 Months _

• Take full ownership of onboarding and offboarding across macOS, Windows, and Ubuntu, and implement zero-touch where feasible
• Own the service desk, serve as the first point of contact for all support tickets and escalations
• Fully understand and master the IT asset lifecycle end to end: procurement, assignment, recovery, and retirement

_ By 4-6 Months _

• Implement a patch management program that covers all personnel workstations
• Fully audit internal company resources and harden security posture
• Document and clean up network segmentation, including the boundary between corporate and engineering environments
• Build out the internal knowledge base and measurably reduce the top recurring ticket drivers

_ By 6-12 Months _

• Automate and standardize IT operations across onboarding/offboarding, endpoint provisioning, software deployment, and routine administrative workflows, ensuring appropriate approvals, auditability, and alignment with established policies.
• Mature endpoint compliance and vulnerability management by maintaining consistent patching, security baselines, monitoring, and risk-based remediation across macOS, Windows, and Ubuntu.
• Strengthen identity and access management through least-privilege enforcement, periodic access reviews, and improved provisioning/deprovisioning processes, consistent with established authorization and separation-of-duties requirements.
• Validate and improve existing backup, disaster recovery, and business continuity procedures for critical internal IT systems through documented testing, remediation of identified gaps, and alignment with established recovery objectives.
• Drive measurable improvements in IT operational efficiency, reliability, and security, independently delivering at least one approved infrastructure or security initiative while maintaining appropriate documentation and audit evidence.

Qualifications

• 4-6 years in IT, with at least 2 years beyond frontline support in a systems, infrastructure, or IT engineering capacity
• Deep hands‑on administration across macOS, Windows, and Linux, including Ubuntu in an engineering environment
• Production experience administering an identity or directory platform — JumpCloud— including group design, SSO integrations, and conditional access or MFA policy
• Strong Google Workspace administration, beyond creating and deleting users
• Working networking knowledge you can apply without supervision: VLANs, routing, firewall rules, DNS, DHCP, VPN, and Wi‑Fi design and troubleshooting
• Scripting for automation in Bash, PowerShell, or Python, and comfort working against vendor APIs
• Experience with MDM and