Original listing text, shown exactly as published by the company.
Key Responsibilities
- Manage the company’s internal IT operations, including identity and access management, Google Workspace administration, SaaS tools, endpoint management, and AWS access governance.
- Ensure secure user lifecycle processes, access reviews, device compliance, and support SOC 2 audit readiness. The role also includes managing SaaS vendors, renewals, license usage, and improving IT processes through documentation and automation.
Requirements
Identity & Access Management
- Proven experience administering Google Workspace at scale (user lifecycle, groups, organizational units, security settings, DLP)
- Strong understanding of SCIM provisioning and SSO/SAML integrations across SaaS applications
- Hands-on experience performing user access management, including joiner/mover/leaver workflows
- Experience conducting periodic access reviews and least-privilege audits
Cloud & Infrastructure Access
- Experience managing AWS access (IAM users, roles, groups, policies, SSO via IAM Identity Center) — infrastructure management not required, but comfort navigating the console and understanding permission boundaries is essential
Device & Endpoint Management
- Experience with Apple device management via Iru (formerly Kandji) or a comparable MDM
- Working knowledge of Apple Business Manager (ABM), including DEP enrollment, VPP, and Managed Apple IDs
- Familiarity with managing Google Meet hardware / conference room devices (Logitech, Poly, or similar)
Compliance & Security
- Practical experience supporting SOC 2 (Type I or II) audits, including evidence collection and control ownership
- Familiarity with additional frameworks (ISO 27001, HIPAA, or similar) is a plus
- Understanding of common IT controls: access reviews, change management, MFA enforcement, endpoint compliance
Vendor Management
- Experience owning the SaaS vendor lifecycle: intake, security review, procurement, renewal, and offboarding
- Proven track record negotiating contracts and renewals (pricing, terms, true-ups, multi-year commitments)
- Ability to track license utilization and right-size seats to control spend
- Comfort partnering with Legal, Finance, and Security on MSAs, DPAs, and vendor risk assessments
- Maintains an up-to-date vendor inventory and renewal calendar
Automation & Scripting
- Comfortable with at least one scripting language (Python, Bash, or PowerShell) to automate provisioning, reporting, and routine IT tasks
- Experience integrating systems via APIs or no-code/low-code tools (Okta Workflows, Tines, Zapier) is a plus
Nice to Have
- Experience with Linear for IT ticketing and intake workflows
- Familiarity with Vanta for continuous compliance monitoring and evidence automation
- Prior experience at a startup or fast-growing company where IT scope spans helpdesk, security, and compliance
Soft Skills
- Strong documentation habits — runbooks, SOPs, and onboarding guides
- Ability to translate technical controls into clear language for non-technical stakeholders
- Comfort owning end-to-end projects with minimal oversight
Location
- Paris
- This role is hybrid, and you are expected to be in the office 3 days a week on average.
