IT Contractor

• Own day-to-day IT operations and device management, including laptops, endpoints, onboarding/offboarding, inventory, and lifecycle management
• Implement and manage identity, access, and permissioning controls, including SSO, role-based access, and access reviews
• Execute technical security controls in support of HIPAA, SOC 2, and enterprise customer requirements
• Support SOC 2 and enterprise security remediation, including implementing controls, coordinating evidence, and maintaining documentation
• Implement and operate an IT support ticketing system and service catalog with auditable request tracking
• Manage IT vendors and tools, including evaluating, implementing, and integrating platforms (e.g., MDM, IdP, ticketing)
• Partner closely with Engineering, Compliance, and external security vendors to align technical implementation with compliance requirements
• Produce clear system and process documentation and ensure knowledge transfer to internal teams

• 3-5+ years of IT operations and/or security experience, ideally in healthcare, healthtech, or other regulated environments
• Experience with device management, identity management, and access controls
• Experience with tools like Electric, Kandji, Jamf, Okta, Google Workspace, Freshservice, or similar platforms
• You’ve supported SOC 2 or enterprise security audits, including remediation and evidence collection
• You’re comfortable evaluating and implementing tools such as MDM platforms, SSO/IdP solutions, and ticketing systems
• Clear, direct communicator
• organized and detail-oriented
• You prefer building and implementing systems over purely advisory work
• Demonstrated ability to work autonomously and escalate appropriately in fast-moving environments with evolving requirements

• Understanding of HIPAA security requirements and how they translate into real-world technical controls is a plus, but not required
• Healthcare IT experience is strongly preferred

This is a remote, contract role, with the opportunity to convert to full-time