Define and deploy automation opportunities across the IT stack to reduce manual work and improve consistency and reliability.
Design and roll out conditional access and security policies at scale across our fleet of endpoints, in partnership with the security team.
Automate OS, security and application patching, and proactively monitor fleet health and compliance to catch trends and fix problems before users are impacted.
Continuously improve the end-user experience through optimization, automation and streamlined processes.
Partner with OT and engineering teams to support device and access needs in OT-adjacent environments.
Support the device lifecycle, from provisioning and deployment through refresh and retirement.
Take ownership of special projects, involve the relevant teams, and ensure timely completion.
Document work clearly, including procedures, configurations and runbooks, and follow internal security policies and change management practices.
Qualifications
Bachelor’s degree in Computer Science, Information Systems, Engineering, or a related field (or equivalent experience).
4+ years of experience in endpoint engineering, systems engineering, or a similar corporate IT engineering role.
Hands-on experience administering Jamf Pro or a similar macOS management platform in a production environment, including enrollment, profiles, policies, scripting and patching.
Hands-on experience administering Microsoft Intune or a similar management platform for Windows and mobile devices, and working knowledge of an identity platform such as Entra ID or Okta, including conditional access and device compliance.
Proficiency in at least one scripting language (PowerShell, Python or Bash) and experience automating administrative tasks, ideally through REST or Graph APIs.
Solid understanding of macOS and Windows internals, device enrollment and provisioning workflows, and troubleshooting methodology.
Working knowledge of networking and identity fundamentals (TCP/IP, DNS, DHCP, Wi-Fi and 802.1X, VPN or ZTNA, certificates and PKI).
Working knowledge of SSO and SCIM provisioning through identity platforms such as Entra ID or Okta, including how identity and device signals work together.
Proven ability to serve as an escalation point: diagnosing complex issues, communicating clearly with technical and non-technical stakeholders, and documenting outcomes.
Strong customer-service skills and a data-driven approach to identifying and resolving common issues.
Strong attention to detail and sound judgment when rolling out changes that affect the entire fleet.
Preferred Qualifications
Experience supporting or collaborating with OT, industrial or manufacturing environments, including familiarity with segmented networks and the constraints of OT-adjacent systems.
Experience working in a defense, aerospace or other regulated environment, with familiarity with frameworks such as NIST 800-171 or CMMC.
Experience with EDR and security tooling (e.g., CrowdStrike, Microsoft Defender).
Experience with modern configuration management and application packaging tools, and with source control or CI/CD approaches to managing device configuration.
Familiarity with Linux endpoints and cloud platforms such as AWS/AWS GovCloud or Azure.
Willingness and eligibility to obtain a U.S. security clearance.
Industry certifications such as Jamf Certified Tech or Admin, Microsoft MD-102 or SC-300, or CompTIA Security+.
Benefits
Medical Insurance: Comprehensive health insurance plans covering a range of services
Saronic pays 100% of the premium for employees and 80% for dependents
Dental and Vision Insurance: Coverage for routine dental check-ups, orthodontics, and vision care
Saronic pays 99% of the premium for employees and 80% for dependents
Time Off: Generous PTO and Holidays
Parental Leave: Paid maternity and paternity leave to support new parents
Competitive Salary: Industry-standard salaries with opportunities for performance-based bonuses
Retirement Plan: 401(k) plan
Stock Options: Equity options to give employees a stake in the company’s success
Life and Disability Insurance: Basic life insurance and short- and long-term disability coverage
Additional Perks: Free lunch benefit and unlimited free drinks and snacks in the office
Physical Demands
Prolonged periods of sitting at a desk and working on a computer.
Occasional standing and walking within the office.
Manual dexterity to operate a computer keyboard, mouse, and other office equipment.
Visual acuity to read screens, documents, and reports.
Occasional reaching, bending, or stooping to access file drawers, cabinets, or office supplies.
Lifting and carrying items up to 20 pounds occasionally (e.g., office supplies, packages).
This role requires access to export-controlled information or items that require “U.S. Person” status. As defined by U.S. law, individuals who are any one of the following are considered to be a “U.S. Person”: (1) U.S. citizens, (2) legal permanent residents (a.k.a. green card holders), and (3) certain protected classes of asylees and refugees, as defined in 8 U.S.C. 1324b(a)(3) https://usg02.safelinks.protection.office365.us/?url=https%3A%2F%2Fwww.govinfo.gov%2Flink%2Fuscode%2F8%2F1324b&data=05%7C02%7CGrant.Herod%40saronic.com%7C0741723dfecb481cbd7708ddbf29ba35%7C97799b1f9a79413192f4d7e1a1e8fbf9%7C0%7C0%7C638876908118279060%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=A4VLCF5jKORn72GiPpDQX9drl8UKMVSpIu4TIWXeTL0%3D&reserved=0.
Saronic does not discriminate on the basis of race, sex, color, religion, age, national origin, marital status, disability, veteran status, genetic information, sexual orientation, gender identity or any other reason prohibited by law in provision of employment opportunities and benefits.
If this role is based in the United States, it requires access to export-controlled information or items that require “U.S. Person” status. As defined by U.S. law, individuals who are any one of the following are considered to be a “U.S. Person”: (1) U.S. citizens, (2) legal permanent residents (a.k.a. green card holders), and (3) certain protected classes of asylees and refugees, as defined in 8 U.S.C. 1324b(a)(3) https://www.govinfo.gov/link/uscode/8/1324b.
Saronic does not discriminate on the basis of race, sex, color, religion, age, national origin, marital status, disability, veteran status, genetic information, sexual orientation, gender identity or any other reason prohibited by law in provision of employment opportunities and benefits. We are also committed to providing reasonable accommodations for qualified individuals with disabilities.
