IT Lead

We are looking for a hands-on Senior IT & Security Manager to own the company’s IT operations, internal infrastructure, security operations, and compliance processes.
This is a one-person ownership role combining day-to-day employee support with infrastructure improvements, Microsoft ecosystem management, AWS networking in close collaboration with DevOps, SSO, and SOC 2 / ISO 27001 maintenance. This is not a DevOps position.

Responsibilities

• Own and manage company-wide IT operations, 100% SaaS platform, access management, and security operations.
• Provide hands-on IT support to employees, mostly in Israel, including onboarding, offboarding, equipment, accounts, permissions, licenses, and access removal.
• Administer and optimize the Microsoft environment, including Microsoft 365, Entra ID, Exchange Online, Intune, Defender, MFA, Conditional Access, and security policies.
• Manage macOS and Windows endpoints using Intune and Kandji.
• Manage and improve corporate networking, including VPN, Wi-Fi, remote access, and connectivity.
• Work closely with DevOps on AWS networking and infrastructure topics, including VPCs, subnets, route tables, security groups, VPN connectivity, and access controls.
• Maintain SOC 2 and ISO 27001 readiness, including evidence collection, policies, controls, audits, vendor reviews, risk tracking, and access reviews.
• Manage IT vendors, procurement, licenses, renewals, hardware, software, and cost optimization.
• Create and maintain clear documentation for IT systems, processes, troubleshooting, infrastructure, and security controls.

Requirements

• 5+ years of hands-on experience in IT, IT infrastructure, or IT operations.
• Proven experience owning IT end-to-end as a sole IT owner.
• Strong experience with Microsoft 365, Entra ID, Intune, Microsoft Defender, Exchange Online, Conditional Access, MFA, and endpoint security.
• Experience managing macOS and Windows environments, with hands-on Intune experience and familiarity with Kandji.
• Proven experience integrating SaaS and cloud environments with SSO solutions, including Auth0 or similar identity platforms.
• Strong networking knowledge, including VPN, routing, Secured connections, DNS, DHCP, and troubleshooting.
• Hands-on experience with AWS networking, including VPCs, subnets, route tables, security groups, VPN connectivity, and cloud access concepts.
• Proven experience maintaining SOC 2 or ISO 27001 compliance processes.
• Good understanding of IT security, endpoint protection, access controls, risk management, vendor reviews, and secure IT operations.
• Good written and spoken English.

Advantages

• Big advantage: strong cybersecurity knowledge, including security architecture, threat detection, incident response, vulnerability management, hardening, cloud security, and secure access management.
• Relevant certifications such as AWS, Microsoft, CCNA, CISSP, CISM, CISA, or ISO 27001.
• Scripting or automation experience.