IT Lead

Role Summary 

The IT Lead is a senior, hands-on individual contributor responsible for delivering and improving day-to-day IT services in a high-compliance environment supporting both commercial and government customers. This role owns technical execution across the service desk, endpoints, identity, networking, automation, documentation, and SaaS tooling, while ensuring systems are reliable, secure, and audit-ready. 
 
The IT Lead works closely with IT, Infosec, GRC, Engineering, and supports users across the U.S. and internationally. The role focuses on removing manual steps through automation, creating an invisible IT experience where systems work reliably in the background, and proactively supporting evolving business needs rather than reacting to failures.  

Key Responsibilities 

End-User Support & Service Desk (Hands-On) 

• Manages the day to day IT Team. 
• Provide top-tier technical support and troubleshooting for end users across Mac and Windows workstations, Microsoft applications, and other business systems, handling issues of all complexity.
• Act as the senior escalation point for Tier 2/3 service desk issues while remaining directly hands-on with tickets and troubleshooting.
• Mentor and lead IT Team
• Deliver white-glove VIP support for executives and mission-critical users.
• Participate in an on-call rotation to provide after-hours emergency support for critical systems.
• Focus on proactive support by addressing root causes, improving systems, and preventing repeat issues. 

Onboarding, Offboarding & Hardware Lifecycle

• Execute and continuously improve onboarding and offboarding processes, including access provisioning, device setup, and secure deprovisioning. 
• Manage hardware procurement, asset tracking, lifecycle management, and secure disposal.
• Build and maintain automation for onboarding, offboarding, and access workflows. 

Endpoint Management & MDM (Mac & Windows) 

• Manage and support Mac and Windows endpoints at scale using MDM platforms including Microsoft Intune and Addigy. 
• Create OS update policies, automate patch management, compliance enforcement, and manage all endpoints.
• Deploy and maintain all business applications across Mac and Windows environments.
• Ensure reliable cross-platform integration between macOS systems and Microsoft services. 

Identity, Access & SaaS Administration 

• Administer identity and access management platforms with Okta as the primary IdP, supporting SAML, OIDC, OAuth, MFA, and lifecycle-based access controls. 
• Design and maintain automation using Okta Workflows or similar low-code tools for identity lifecycle management, approvals, and access provisioning.
• Manage integrations between Okta and other systems
• Administer Microsoft 365 services including Teams, OneDrive, SharePoint, Exchange, Azure, and Entra ID.
• Manage and support a broad ecosystem of SaaS applications across engineering, business, and operations functions.
• Capable of identifying key opportunities for automations using Okta Workflows 

Endpoint Security & Zero Trust Access 

• Administer and support CrowdStrike for host management, detection, response and incident support. 
• Administer and support Zscaler for secure access and Zero Trust networking.
• Ensure host and access controls align with Infosec and compliance requirements. 

Network & Infrastructure Operations 

• Provide hands-on support for corporate networking including LAN/WAN connectivity, firewalls, DNS, routing, VPN, and Zero Trust access. 
• Support Zero Trust networking solutions such as Zscaler
• Provide backup support to the Global Sensor Network including networking, Linux systems, firewalls, and Zero Trust environments.
• Implement and maintain backup and recovery solutions for endpoints and critical systems. 

Automation, DevOps & Process Improvement 

• Develop and maintain automation using Bash, PowerShell, and Python and API’s 
• Apply DevOps concepts including configuration and infrastructure as code (e.g., Terraform).
• Use GitHub for version-controlled automation and operational tooling.
• AWS or similar  
• Proactively identify and eliminate unnecessary manual steps, designing reliable systems that operate with minimal intervention. 

Documentation, Compliance & Risk 

• Create and maintain durable technical documentation for service desk processes, MDM, identity, networking, automation, and tooling. 
• Maintain accurate inventories of endpoints, access, and IT-owned systems.
• Provide backup support to Infosec and GRC for audits, access reviews, evidence collection, and remediation.
• Support IT-side execution during security and operational incidents in coordination with Infosec.
• Operate IT systems in a high-compliance environment including CMMC and NIST 800-171. 

Minimum Qualifications 

• 5+ years of experience in IT Engineering, Systems Administration, or a related field. 
• Associate degree in Information Technology, Computer Networking, Computer Engineering, Computer Science, or equivalent experience.
• Strong hands-on service desk experience.
• Experience managing macOS and Windows endpoints using Intune and/or Addigy.
• Hands-on experience with Okta and Okta Workflows or similar low-code tools.
• Experience supporting Zscaler and CrowdStrike.
• Proficiency administering Linux and Windows servers.
• Strong networking fundamentals including firewalls, DNS, routing, and secure access.
• Experience scripting with Bash, Python, PowerShell, or Ansible.
• Strong communication skills and a proactive, Infosec-minded approach.
• Eligibility to obtain or maintain a U.S. Government security clearance. 

Success in This Role Looks Like 

• IT systems operate reliably with minimal disruption. 
• Manual, repetitive work is consistently eliminated through automation.
• Service desk issues are resolved quickly with fewer repeat incidents.
• IT proactively supports business needs rather than reacting to failures.
• Systems and documentation are audit-ready and easy to operate. 

Location: Windsor / Denver, Colorado 
This role is ideally based in the Windsor–Denver area and requires the ability to commute to the office in Windsor as needed. Remote candidates may be considered with the expectation of some periodic travel

Salary: $130,000 - $155,000