We are looking for a hands-on Senior IT & Security Manager to own the company’s IT operations, internal infrastructure, security operations, and compliance processes.
This is a one-person ownership role combining day-to-day employee support with infrastructure improvements, Microsoft ecosystem management, AWS networking in close collaboration with DevOps, SSO, and SOC 2 / ISO 27001 maintenance. This is not a DevOps position.
Responsibilities
- Own and manage company-wide IT operations, 100% SaaS platform, access management, and security operations.
- Provide hands-on IT support to employees, mostly in Israel, including onboarding, offboarding, equipment, accounts, permissions, licenses, and access removal.
- Administer and optimize the Microsoft environment, including Microsoft 365, Entra ID, Exchange Online, Intune, Defender, MFA, Conditional Access, and security policies.
- Manage macOS and Windows endpoints using Intune and Kandji.
- Manage and improve corporate networking, including VPN, Wi-Fi, remote access, and connectivity.
- Work closely with DevOps on AWS networking and infrastructure topics, including VPCs, subnets, route tables, security groups, VPN connectivity, and access controls.
- Maintain SOC 2 and ISO 27001 readiness, including evidence collection, policies, controls, audits, vendor reviews, risk tracking, and access reviews.
- Manage IT vendors, procurement, licenses, renewals, hardware, software, and cost optimization.
- Create and maintain clear documentation for IT systems, processes, troubleshooting, infrastructure, and security controls.
Requirements
- 5+ years of hands-on experience in IT, IT infrastructure, or IT operations.
- Proven experience owning IT end-to-end as a sole IT owner.
- Strong experience with Microsoft 365, Entra ID, Intune, Microsoft Defender, Exchange Online, Conditional Access, MFA, and endpoint security.
- Experience managing macOS and Windows environments, with hands-on Intune experience and familiarity with Kandji.
- Proven experience integrating SaaS and cloud environments with SSO solutions, including Auth0 or similar identity platforms.
- Strong networking knowledge, including VPN, routing, Secured connections, DNS, DHCP, and troubleshooting.
- Hands-on experience with AWS networking, including VPCs, subnets, route tables, security groups, VPN connectivity, and cloud access concepts.
- Proven experience maintaining SOC 2 or ISO 27001 compliance processes.
- Good understanding of IT security, endpoint protection, access controls, risk management, vendor reviews, and secure IT operations.
- Good written and spoken English.
Advantages
- Big advantage: strong cybersecurity knowledge, including security architecture, threat detection, incident response, vulnerability management, hardening, cloud security, and secure access management.
- Relevant certifications such as AWS, Microsoft, CCNA, CISSP, CISM, CISA, or ISO 27001.
- Scripting or automation experience.