Sole IT & Security Lead — IAM, Endpoints, Onboarding

Cayaba Care; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

Cayaba Care is seeking an experienced IT Manager to own day-to-day IT operations, onboarding/offboarding, and IAM for a distributed team. This hands-on, one-person IT role serves as the primary point of contact for all IT and security matters, with future potential to lead a team.

You will manage user provisioning, device fleet with Intune, end-user support across Windows and macOS, and enforce security policies while documenting processes for scale.

Qualifications

• Senior IT experience with one-person IT department at startups.
• Experience in IAM, onboarding/offboarding, and MFA rollout.
• Strong endpoint security, patch management, and encryption knowledge.
• Deep familiarity with Windows and macOS support.
• Scripting skills in PowerShell and Bash for automation.
• Experience in remote-first environments and SLAs.

Responsibilities

• Own day-to-day IT operations and user lifecycle management.
• Provision/deprovision accounts and manage device fleet (Intune).
• Lead IAM strategy, access reviews, and least-privilege enforcement.
• Provide Tier 1-3 end-user support and maintain SLAs.
• Enforce security policies, manage Defender, and patching.
• Document processes and act as primary escalation point.

Skills

Independent work

Communication

Problem solving

Security fundamentals

Remote work

Education

IT Security Certification (e.g., CompTIA Security+)

Google Workspace Administrator

Microsoft 365 Certified: Endpoint Administrator Associate

ITIL Foundation

Tools

PowerShell

Bash

Microsoft Intune

Microsoft Defender

Google Workspace

O365 / Microsoft 365

Job description

Cayaba Care is seeking an experienced IT Manager to own day-to-day IT operations, onboarding/offboarding, and IAM for a distributed team. This hands-on, one-person IT role serves as the primary point of contact for all IT and security matters, with future potential to lead a team.

You will manage user provisioning, device fleet with Intune, end-user support across Windows and macOS, and enforce security policies while documenting processes for scale.