TechOps Engineer

Candid Health; New York (NY); On-site; USD 100,000 - 140,000; Full time

Job summary

Candid Health is seeking a highly autonomous Technical Operations professional to automate employee lifecycle tasks, manage Apple MDM tooling (Jamf/Kandji), and improve security through Zero Trust implementations. You will balance day-to-day IT support with strategic projects in a fast-paced healthcare tech environment.

You will own end-to-end lifecycle automation, troubleshoot complex macOS issues, and collaborate with Engineering, Security, and People Ops to scale our infrastructure while

Qualifications

• 4+ years of hands-on Technical Operations or IT experience.
• Strong macOS troubleshooting skills and Apple MDM experience.
• Experience managing Apple MDM tools (Jamf, Kandji) and packaging workflows (AutoPkg).
• Awareness of data protection, compliance, and secure offboarding processes.
• Ability to translate security/technical changes to non-technical stakeholders.

Responsibilities

• Scale onboarding/offboarding by automating the end-to-end lifecycle for employees.
• Lead high-impact projects such as migrating Apple MDM platforms and Zero-Touch Enrollment.
• Build and maintain secure endpoint configurations for workstations and mobile devices.
• Enforce Zero Trust with SSO, SAML, and MFA across applications.
• Root-cause troubleshooting and collaboration with Engineering, Security, and People Ops.

Skills

Technical Operations

IT support

macOS troubleshooting

Automation / scripting

Zero Trust security concepts

Stakeholder communication

Tools

Jamf

Kandji

AutoPkg

Job description

• In this role, you won’t just be closing tickets, you’ll treat our internal IT infrastructure as a product, building automated systems that enable our teams to tackle some of the hardest problems in the US healthcare system
• At Candid, we view Technical Operations not as a traditional corporate cost center, but as an engineering discipline and a driver of business value. You will balance day-to-day user support with deep project work, have a direct say in the tools we use, and work closely with Corporate Security and People Ops to scale our environment
• Scale Onboarding & Offboarding: Own and automate the end-to-end operational lifecycle for employees, optimizing our current processes so they can seamlessly scale as our team grows
• Execute High-Impact Projects: Lead immediate critical initiatives including migrating our Apple MDM platforms, perfecting a frictionless Zero-Touch Enrollment pipeline, and building Just-in-Time (JIT) access automation
• Endpoint & App Management: Set up and maintain secure endpoint configurations for workstations and mobile devices using Apple MDM (Jamf/Kandji), AutoPkg, and complementary security software
• Enforce Zero Trust Security: Securely implement and manage critical business applications, ensuring modern zero-trust enforcement via SSO, SAML, and MFA
• Root-Cause Troubleshooting: Investigate why things break. We value curiosity and fixing core infrastructural issues over applying quick, repetitive patches
• Collaborate Across Teams: Work closely with stakeholders in Engineering, Security, and People Operations to deliver tools and processes that make their work safer and easier

You are highly autonomous and naturally biased toward action. When you see a manual task done twice, your first instinct is to script or automate it out of existenceYou bring 4+ years of hands-on Technical Operations or IT experience, ideally honed in a fast-paced tech startup or a high-volume Managed Service Provider (MSP) environmentYou possess deep technical troubleshooting skills across macOS and hands-on experience managing Apple MDM tools (Jamf, Kandji, etc.) and packaging workflows (AutoPkg)You naturally think about compliance, data protection, and secure offboarding processes to keep patient data completely safeYou treat internal employees as your customers. You can seamlessly translate complex security or technical changes to non-technical stakeholders (from our Head of Engineering to our medical billers)