IT Systems & Security Engineer - LATAM

Based in Williamsburg, VA, DataXstream stands as a proud and dedicated SAP partner with over two decades of experience. We are relentlessly focused on innovating, rebuilding, and perfecting the most robust and user-friendly Order Management software available for the SAP ecosystem. As we continue to grow our impact and our team, we're seeking passionate individuals to join us in shaping the future of enterprise solutions.

IT Systems & Security Engineer

DataXstream runs a macOS-first endpoint environment managed through Addigy MDM, with production infrastructure built predominantly on SUSE Linux. Microsoft 365 underpins company-wide collaboration, identity, and SSO — but the day-to-day operational reality of this role is macOS administration, Linux-aware security operations, and endpoint security tooling, not Microsoft dashboard work.

DataXstream’s security function is evolving rapidly alongside a company-wide AI platform buildout and expanding cloud footprint. The IT Systems & Security Engineer will take ownership of this function as the company scales, establishing baselines, building runbooks, and maturing the organization’s posture with the full support of the Director of IT Operations and the Infrastructure Engineer — with real ownership from day one.

This is an ideal role for someone early in their security career who is comfortable on the command line, curious about how systems fail, and eager to grow into full ownership of an endpoint and security function at a company that is actively investing in its IT posture. DataXstream is actively integrating AI tooling across engineering, operations, and IT — from code generation to dashboards and connectors. This team uses AI as a force multiplier, and this role is expected to do the same.

Main Duties and Responsibilities

Endpoint Management

• Addigy MDM platform ownership — policy authoring, configuration profiles, app deployments, and fleet lifecycle management for the DataXstream Mac estate
• Endpoint security tooling — day-to-day management of antivirus, malware protection, and DNS filtering across the endpoint fleet; alert triage, policy tuning, and incident response
• Employee onboarding and offboarding — device provisioning, endpoint configuration, and access management alongside the IT Support Specialist

Security Operations

• Security monitoring and log review — working with centralized log management infrastructure and platform-native logs to identify anomalies, triage alerts, and build toward proactive detection coverage
• Vulnerability awareness and tracking — maintaining visibility into endpoint and platform exposure, prioritizing remediation, and coordinating with the Infrastructure Engineer on server-side patching
• Incident response — serving as the first responder for endpoint and identity security incidents; developing and maintaining runbooks for common scenarios
• Security policy development — documenting baselines, access control standards, and operational procedures as the security function matures
• Compliance support — contributing to audit preparation and alignment with security frameworks as the organization’s compliance posture develops

Platform & Identity Administration

• Microsoft 365 administration — Exchange Online, SharePoint Online, Teams, OneDrive, and licensing management; M365 serves as the company’s collaboration platform and SSO provider
• Identity and access management — Entra ID / Azure AD user and group management, MFA enforcement, and conditional access policy support
• VPN administration — user provisioning, access management, and support for the company’s OpenVPN-based remote access infrastructure
• Participation in IT Operations on-call rotation for security incidents and endpoint emergencies
• Contribution to secrets management and IaC initiatives as they relate to endpoint and security tooling

Cross-Coverage Responsibilities

DataXstream is committed to eliminating single points of failure across IT Operations. This role is expected to develop working knowledge of the Infrastructure Engineer's domain sufficient to provide continuity during absence.

• Basic vSphere / vCenter VM health monitoring — ability to identify and escalate infrastructure issues
• Veeam backup job status awareness — ability to verify jobs are completing and escalate anomalies using documented runbooks
• General server infrastructure awareness — sufficient to triage basic issues and engage appropriate escalation paths

Must-Have Skills and Qualifications

• Comfort with macOS and the Apple ecosystem — all DataXstream endpoints are Mac; familiarity with macOS system administration, preferences, profiles, and the terminal is essential
• Strong terminal skills — you are comfortable administering systems via CLI on both macOS and Linux without relying on a GUI
• Scripting ability — comfort writing Bash or Python scripts for automation, endpoint management, and security tasks is expected; equally important is the ability to read and understand code written by others or generated by AI tools before running it in a production environment. We don't want copy-paste engineers.
• Foundational Linux familiarity — DataXstream’s infrastructure is predominantly SUSE Linux; you don’t need to be a Linux administrator, but you need to be comfortable navigating and troubleshooting in a Linux environment
• Interest in and exposure to endpoint management — any hands-on experience with MDM platforms (Addigy, Jamf, Intune, or similar) is a strong plus
• Foundational security knowledge — understanding of endpoint security concepts, alert triage, and basic incident response; coursework, certifications, CTF experience, or hands-on projects all count
• Familiarity with identity and access management concepts — Active Directory, Entra ID / Azure AD, MFA, and conditional access
• Familiarity with Microsoft 365 — any hands-on exposure to Exchange Online, SharePoint, Teams, or M365 administration
• Willingness to participate in on-call rotation for security incident response
• Clear written communication — you document what you learn and what you change
• English proficiency — day-to-day communication with a North American team requires comfort in written and spoken English

What We Value

• Curiosity — you want to understand the platform, not just make the ticket go away
• Ownership — when something is yours to deliver, you see it through
• Communication — you keep customers and teammates informed, especially when things get complicated
• Growth mindset — every customer engagement teaches you something; you pay attention to those lessons
• Collaboration — you ask the team when you're stuck and you share what you learn
• AI fluency — you’re curious about how AI tools can accelerate your work and you use them; we’re leaning into AI across the organization and expect this role to as well

Nice to Have

• Security certification or active pursuit: CompTIA Security+, CySA+, or equivalent
• Addigy or Jamf certification, or demonstrated hands-on MDM administration experience
• Exposure to endpoint security tooling: CrowdStrike, SentinelOne, Malwarebytes, or similar
• Exposure to log management or SIEM tooling: Splunk, Wazuh, Graylog, or equivalent
• Familiarity with compliance frameworks: SOC 2, ISO 27001, or similar — awareness of the concepts is sufficient
• Microsoft 365 certification or active pursuit: MS-900, MS-102, or equivalent
• Homelab or self-directed security project experience — CTFs, home network security, personal labs
• Exposure to CAB or change process management — endpoint and identity changes can have broad organizational impact
• Familiarity with Atlassian tools — Jira for task and project management
• Experience using company-approved AI tools to increase personal productivity and efficiency

DataXstream LLC is an equal-opportunity workplace and an affirmative-action employer. We are always committed to equal employment opportunities regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, or Veteran status. Discrimination is not welcome on the basis of any other status protected by the laws or regulations in the locations where we work.