Mac IT & Security Operations Lead

Angeles Investors, Inc.; San Francisco, Northern (CA, KY); Hybrid; USD 110,000 - 140,000; Full time

Benefits offered by this job

Equity

Benefits

Job summary

Finix is seeking an IT Operations Specialist to own device and employee lifecycle in a Mac-first, in-office environment in San Francisco. You will manage Mac provisioning, enrollment, patching, and secure decommissioning to meet security baselines from day one.

You’ll design onboarding/offboarding workflows, administer Okta SSO/MFA, and enforce least-privilege access across SaaS apps and internal systems, while supporting SOC 2/ISO 27001 compliance efforts.

Qualifications

• 3–5+ years IT operations experience in a Mac-first environment.
• Hands-on expertise with Okta, Kandji, and Palo Alto Networks.
• Strong understanding of employee lifecycle processes and their security implications.
• Experience supporting compliance frameworks (SOC 2, ISO 27001, or similar).
• Comfortable writing shell scripts or Python to automate repetitive tasks.

Responsibilities

• Device Lifecycle Management: Mac provisioning, enrollment, patching, and secure decommissioning.
• Employee Lifecycle: Onboarding and offboarding workflows with automated provisioning/deprovisioning.
• Identity & Access Management: Administer Okta SSO, MFA, and lifecycle policies.
• IT & Network Security: Manage Palo Alto firewalls and security policies.
• Compliance & Security: Support SOC 2/ISO audits with asset inventories and access logs.
• AV & Conference Systems: Maintain meeting room AV and video conferencing tooling.
• Tooling & Automation: Improve IT workflows through scripting and automation.

Skills

Mac-first IT ops

Okta

Palo Alto Networks

Shell scripting or Python

Ownership & accountability

Tools

Kandji

Atlassian

Job description

Finix is seeking an IT Operations Specialist to own device and employee lifecycle in a Mac-first, in-office environment in San Francisco. You will manage Mac provisioning, enrollment, patching, and secure decommissioning to meet security baselines from day one.

You’ll design onboarding/offboarding workflows, administer Okta SSO/MFA, and enforce least-privilege access across SaaS apps and internal systems, while supporting SOC 2/ISO 27001 compliance efforts.