IT Administrator

About the role

The IT Administrator keeps TrueComp running internally. That means the systems our team works in every day, the identities and access behind them, the devices in people's hands, and the security posture our customers ask us about.

We are a 30-person company serving public agencies. Cities, counties, and special districts hold their vendors to a higher security standard than a typical SaaS buyer. Security questionnaires, access reviews, and evidence requests are a regular part of this job, not an annual fire drill.

This role also supports our AWS environment alongside the Chief Operations Officer, who retains ownership of the cloud infrastructure. You will not architect it, but you will be in it.

This is internal IT. Customer-facing product support belongs to our Onboarding Specialist. You support the people who work here. This role reports to the Chief Operations Officer.

What you'll do

Identity and Access

Manage user provisioning and deprovisioning across every system we run, with same-day turnaround on departures.

Administer Microsoft 365, Entra ID, and single sign-on, including MFA enforcement and conditional access policies.

Run periodic access reviews across our application stack and document the results.

Maintain accurate records of who has access to what, including administrative and privileged accounts.

Execute access changes against COO approval. You run provisioning, changes, and removal. Approval for privileged and administrative access stays with the COO.

Systems and Infrastructure

Administer our SaaS stack, including Microsoft 365, Salesforce, Salesloft, HubSpot, Zendesk, and Jira.

Support our AWS environment alongside the COO — account and IAM hygiene, monitoring and alerting, cost visibility, and routine operational tasks.

Manage DNS, domains, and certificates.

Own backup, recovery, and business continuity for internal systems, including testing restores rather than assuming they work.

Endpoint and Employee Support

Procure, configure, deploy, and track laptops and mobile devices across a fully remote team.

Run endpoint management and patching so our fleet stays current without anyone chasing it.

Handle day-to-day internal support requests with a response standard people can count on.

Own IT onboarding and offboarding so a new hire is productive on day one and a departure is closed out the same day.

Recover, wipe, and document the disposal of devices when people leave. A laptop that never comes back is both an asset loss and a data exposure.

Security and Compliance

Support our security and compliance program under the COO's ownership — evidence collection, control documentation, and policy upkeep.

Work with the COO on customer and prospect security questionnaires, and own the accuracy of the technical answers.

Own day-to-day governance of AI tool use — maintain the approved tool list, enforce data handling rules, and keep customer data out of unapproved tools. Our customers are public agencies and they will ask how we govern this.

Maintain the evidence behind our cyber insurance attestations, including MFA coverage, endpoint protection, and tested backup restores.

Maintain security awareness training completion and phishing simulation results.

Monitor security alerts, respond to what you can, and escalate anything that looks like an incident immediately.

Serve as the escalation point for critical outages outside business hours, including Microsoft 365 and AWS availability.

Vendor and Spend Management

Maintain the inventory of every software tool we pay for, who uses it, and when it renews.

Flag unused licenses, duplicate tools, and upcoming renewals in time to do something about them.

Support vendor evaluations and implementations as we add or replace systems.

Review the security posture of any new tool before we buy it, with extra scrutiny on anything that will touch customer data.

Own the IT budget — forecast renewals, keep spend within plan, and bring material changes to the COO.

Process and Documentation

Document our internal systems, configurations, and procedures so this role is not a single point of failure.

Build and maintain internal IT runbooks and a self-service knowledge base for the team.

Identify manual work that should be automated, and automate it.

Qualifications

4+ years in IT administration or systems administration, including ownership of an environment rather than ticket work alone.

Hands-on administration of Microsoft 365 and Entra ID, including SSO, MFA, and conditional access.

Working knowledge of AWS — IAM, EC2, S3, CloudWatch, and cost management. You do not need to be a cloud engineer. You do need to operate confidently in a production account without breaking it.

Endpoint management experience across a distributed, remote workforce.

Experience supporting security and compliance work — SOC 2, security questionnaires, access reviews, or an equivalent framework.

Strong documentation habits. If it only lives in your head, it does not count.

The judgment to work independently in a small company where nobody is checking your work, and the discipline to escalate when something is above your line.

Clear communication with non-technical people. Most of our team is not technical and should not have to be.

Preferred: Salesforce administration, scripting or automation (PowerShell, Python), Zendesk or Jira administration, prior experience at a company under 100 employees, public sector or GovTech exposure.