IT Manager

Openkrill; United States; Remote; USD 110,000 - 150,000; Full time

Job summary

Nadia Care seeks an experienced IT Manager to own day‑to‑day IT operations, IAM, and security for a remote, distributed team. You will be the sole tech resource, handling onboarding, device management, and end-to-end access control.

The ideal candidate operates independently from day one, balances reactive support with proactive improvements, and reports to the CISO. ETZ availability is required.

Qualifications

• 7+ years in IT support/operations, senior or sole IT resource.
• Startup experience as the one-person IT department.
• Strong security fundamentals: encryption, patching, MFA, access controls.
• Hands-on with Defender, Intune, Google Workspace, and patches.
• Experience supporting Windows and macOS environments.
• Own IAM and onboarding/offboarding processes end-to-end.
• Understanding of PHI and HIPAA requirements.
• Excellent written and verbal communication.
• Willingness to ship and store company devices at home.
• Ability to work independently in a remote environment and meet SLAs.
• Must reside in the United States, Eastern Time Zone.

Responsibilities

• IT Support & Operations: primary escalation lead for Tier 1-3 tickets.
• Manage onboarding/offboarding, device setup, and access control.
• IAM strategy: least-privilege enforcement and access reviews.
• Device/Endpoint security: Intune, Defender, patching, encryption.
• Security collaboration with CISO and incident response readiness.

Skills

IT operations

Startup experience

Remote work

Security fundamentals

Communication skills

Documentation

Independent work

Tools

Microsoft Defender

Microsoft Intune

Google Workspace administration

Microsoft O365

Atera (patch management)

Job description

About Us:

The United States has the poorest maternal and birth outcomes of all developed countries with the underserved, Black, Brown, Indigenous communities disproportionately affected. Nadia Care is working to drastically change the experience of affected communities by reimagining how we deliver meaningful and compassionate care to expectant moms.

Nadia Care’s mission is to improve pregnancy, birth and the postpartum journey for women and their families by reimagining how maternity care is delivered. Our team is focused on building trust-based engagement and wrap‑around support for expectant moms at home, in person and virtually to ensure they have all the social support they need for a successful and joyful pregnancy journey. We help our members with care navigation, doula support, assistance with lactation, nutrition, housing, transportation and a wide range of other needs. We leverage technology to support our virtual engagement that allows us to meet all our moms where they are.

We ensure that our members have trusted sources for support, resources, and information throughout their pregnancy, delivery and well into postpartum. Nadia Care does not replace the primary obstetrician or doctor’s relationships. Instead, we support expectant mothers with all other health‑related social needs not typically available through their doctors’ offices.

Our Values:

• Empathy is at the heart of everything we do. We must always center the experiences of the mothers and families we serve, as well as support and uplift one another.
• Collaboration is what makes us stronger. We achieve the greatest impact when we work together, share knowledge, and elevate each other’s strengths.
• Resilience reflects our ability to push through challenges, adapt in a fast‑changing environment, and remain committed to our mission no matter the obstacles.

The Role:

We are seeking an IT Manager to own day‑to‑day IT operations, user lifecycle management (onboarding/offboarding), and identity & access management (IAM) for our growing, distributed team.

This is a hands‑on, one‑person IT and security function. For now, you will be the sole technical resource and the primary point of contact for all IT and security matters, owning the processes end‑to‑end. As the function grows, there is the opportunity to build and lead a team beneath you. You will report directly to the CISO and serve as their key operational partner on access and security matters.

This role goes beyond execution; you’ll set the standards, own the processes end‑to‑end, and serve as the primary technical escalation point. You’ll be provisioning and deprovisioning accounts, managing devices through Intune, driving IAM strategy, managing endpoint security, and making sure the right people have the right access at the right time.

The ideal candidate is senior enough to operate independently from day one with no ramp‑up required. You’ve operated as the sole or senior IT resource at a startup, are comfortable wearing every hat, owning ambiguous problems independently, documenting your work, and balancing reactive support with proactive process improvement.

Schedule: Mon-Fri 8am-5pm ET, and as needed to respond to urgent issues. This role requires living in the Eastern Time Zone.

Key Responsibilities

IT Support & Operations

• Serve as the primary point of contact and escalation lead for Tier 1-3 technical support requests via ticketing systems
• Support end users across both Windows and macOS environments, including hardware, OS, and application issues
• Troubleshoot connectivity, printing, email, and general software/access issues
• Triage and resolve tickets within defined SLAs, owning escalation paths for complex issues
• Own documentation standards: maintain clear records of common issues, fixes, and internal how‑to guides

User Lifecycle Management & IAM

• Own end‑to‑end onboarding/offboarding: training for new hires on company systems, account provisioning, device setup, and access control for new hires and departing employees
• Own identity and access management (IAM) strategy, including periodic user access reviews, role/permission assignment, and timely deprovisioning
• Apply and enforce least‑privilege principles when granting or reviewing access to systems and applications
• Support SSO configuration and troubleshoot SaaS application access issues
• Maintain accurate records of who has access to what

Device, Endpoint Management & Security

• Administer Microsoft Intune (MDM) and O365 for a remote, multi‑OS device fleet
• Set and enforce security policies across endpoints, including encryption, patching, and compliance configurations
• Deploy, monitor, and manage Microsoft Defender across managed devices
• Own patch management across the fleet
• Handle physical logistics for company devices, including shipping/receiving equipment for new hires, offboarding, and repairs
• Own device inventory tracking and lifecycle management of company hardware, including procurement recommendations
• Manage Google Workspace users, groups, and settings
• Maintain and troubleshoot core SaaS tools used across the organization

Security

• Apply strong security fundamentals across endpoints, identity, and access, including encryption, patching, MFA/conditional access, and least‑privilege enforcement
• Partner with the CISO on access‑related security requests and remediation items
• Serve as the operational owner of endpoint and identity security

Required Qualifications

• 7+ years of IT support/operations experience, including experience as the senior or sole IT resource
• Startup experience, having operated as the "one‑person IT department" handling infrastructure, security, device management, IAM, and end‑user support simultaneously without a larger team to lean on
• Strong working knowledge of security fundamentals: endpoint protection, identity/access security, encryption, patch management, and security best practices in a remote‑first environment
• Hands‑on experience with Microsoft Defender and endpoint security, patch management, Microsoft Intune, Google Workspace administration
• Experience supporting both Windows and macOS environments
• Experience owning IAM / access management strategy and end‑to‑end onboarding/offboarding processes, ticketing systems, and managing work within SLAs
• Understanding of PHI and HIPAA
• Strong written and verbal communication skills, with the ability to explain technical issues to non‑technical staff and represent IT to leadership
• Customer service orientation with the ability to remain patient, empathetic, and reassuring when supporting the team
• Willingness to ship, receive, and temporarily store company equipment (e.g., laptops) at their home as part of device lifecycle logistics
• Ability to work independently, own ambiguous problems, and manage competing priorities in a remote environment
• Must be based in the United States, Eastern Time Zone

Tools & Vendors

• Microsoft Intune
• Microsoft Defender
• Microsoft O365
• Google Workspace
• Slack
• Atera (patch management)

Nice to Have

• Scripting experience (PowerShell, Bash) for task automation
• Experience with Atera
• SOC 2 familiarity
• Security certifications or demonstrable security‑focused project work (e.g., implementing MFA rollout, endpoint hardening, incident response)
• Experience mentoring or providing technical guidance to junior IT staff
• Microsoft 365 Certified: Endpoint Administrator Associate
• Google Workspace Administrator
• CompTIA Security+
• ITIL Foundation

What Success Looks Like

• New hires are fully onboarded and productive on day one, with no access gaps or delays
• Offboarding is complete and access is revoked promptly, with no orphaned accounts left behind
• IAM access reviews run on a schedule you've defined and refined, with clean documentation
• Tickets are resolved consistently within SLA, with a track record of clear communication
• En