IT Engineer

Morpho; United States; Remote; USD 95,000 - 150,000; Full time

Job summary

Morpho ищет специалиста по корпоративной IT, который возьмёт на себя администрирование SSO, директории и менеджера паролей, onboarding/offboarding и сбор логов. Вы будете управлять Mac-парком, внедрять политики MDM и поддерживать агент защиты.

Вы будете работать с командой безопасности, писать автоматизированные решения на Python или Bash, и обеспечивать соответствие аудита SOC 2/ISO 27001. Готовность к дежурствам и желание упрощать процессы приветствуются.

Qualifications

• 5+ лет в IT, системной инженерии или IT-безопасности.
• Практический опыт администрирования с корпоративным провайдером идентификации, MDM и средств безопасности конечных точек.
• Сильное управление macOS: профили конфигурации, приватность и политики расширений системы.
• Умение писать Python или Bash для автоматизации.
• Опыт инфраструктуры как код будет преимуществом.
• Опыт поддержки SOC 2 / ISO 27001 или аналогичного аудита.
• Знание того, что крипто-компании часто являются целями кибератак, и настройка систем соответствующим образом.
• Опыт в Web3 или FinTech будет плюсом.
• Умение писать четкую документацию.
• Предпочтение простым настройкам, понятным пользователям, а не обходным путям.
• Готовность участвовать в сменах дежурства.

Responsibilities

• Администрирование SSO, директории и менеджера паролей.
• Обеспечение onboarding/offboarding и регулярных обзоров доступа.
• Управление Mac-парк: настройка, политики MDM, обновления ОС и приложений, агент защиты.
• Применение базовых настроек безопасности и политик доступа.
• Администрирование SaaS-инструментов: настройка, доступы и лицензии.
• Обработка подрядчиков и их внедрения.
• Поддержка команды безопасности во время инцидентов: изоляция устройств, отзыв доступа и сбор логов.
• Обеспечение доказательной базы для IT-контролей во время аудитов.
• Автоматизация повторяющихся задач: onboarding/offboarding, обзоры доступа и сбор доказательств.
• Поддержка документации по IT-процедурам.
• Участие в дежурстве по IT.

Skills

Automation scripting

macOS management

On-call readiness

Documentation writing

Security tooling knowledge

Tools

Identity provider

MDM

Endpoint security tools

Job description

Описание

Morpho is a leading Decentralized Finance (DeFi) lending protocol backed by a16z crypto, Paradigm, Ribbit Capital, Apollo, Vaneck, Coinbase Ventures, Variant and 50 others to build an open credit network giving anyone, anywhere, access to the best possible terms. Morpho is experiencing exponential adoption, with over billion in deposits on the network and used by institutional clients including Bitwise, Galaxy, and Anchorage Digital and the largest crypto exchanges, such as Coinbase, Binance, and Kraken. Now, Morpho is scaling its team of contributors to establish itself as the open credit network, not just of DeFi, but of the world. Why Morpho Exists Everyone has the potential to build something great for the world. But fulfilling that ambition almost always requires more: people willing to trust you with their capital. Yet access to capital still depends on where you live, who you know, and which institutions are willing to trust you. Even when capital is available, it sits fragmented across disconnected networks and hidden behind intermediaries. The result is a system that fails most of the people it should serve. Borrowers overpay. Lenders earn less than they should. Many are shut out entirely, not because they are unworthy of credit, but because today's infrastructure was never built to connect them. Morpho exists to solve this. Full article here. You’ll run Morpho’s corporate IT: accounts and access, laptops, and the SaaS tools the company runs on, all set up securely. You’ll work closely with the security team: they set policy and lead on incidents, and you put that policy in place across our tools and devices. The scope is broad and the work is hands-on. We’d rather automate repetitive work than hire for it, so expect to write scripts and build your own tooling, using AI where it helps. We’ll go through our stack with you early in the process.

Задачи

• Administer SSO, the directory and the password manager.
• Handle onboarding and offboarding, and run regular access reviews.
• Manage the Mac fleet: setup, MDM policies, OS and app updates, and keeping the endpoint security agent installed and working.
• Apply the security baselines and access policies the security team defines, and keep our tools configured to match.
• Administer our SaaS tools: setup, admin access and licences.
• Handle the IT side of bringing on new vendors.
• Support the security team during incidents by isolating devices, revoking access and pulling logs.
• Provide evidence for IT controls during audits.
• Automate repetitive work such as onboarding, offboarding, access reviews and evidence collection.
• Write and maintain documentation for IT procedures.
• Take part in IT on-call.

Definition of success 1 month: handles onboarding, offboarding and day-to-day account and device work without help, and knows how our tools are set up. End of probation: owns our identity, device and SaaS setup, has automated at least one process that used to be manual, and is the person the security team goes to for IT changes and incident support. 12 months: runs corporate IT independently. Onboarding, offboarding, access reviews and audit evidence mostly run on tooling they built.

Требования

• 5+ years in IT, systems engineering or IT security.
• Hands-on admin experience with an enterprise identity provider, an MDM and endpoint security tools.
• Strong macOS management: configuration profiles, privacy preference and system extension policies.
• Writes Python or Bash to automate work.
• Infrastructure as code is a plus.
• Has supported a SOC 2, ISO 27001 or similar audit.
• Knows crypto companies are frequent targets of phishing and social engineering, and sets up systems with that in mind.
• Web3 or fintech experience is a plus.
• Writes clear documentation.
• Prefers simple setups people follow over perfect ones they work around.
• Comfortable being part of an on-call rotation.

Условия

We design benefits around deep work and growth, so you can do the best work of your career. Expect fair, top-tier compensation, real flexibility, time together in Paris, great health coverage, and support to keep learning.