Blackpoint Cyber is the leading provider of world-class cybersecurity threat hunting, detection and remediation technology. Founded by former National Security Agency (NSA) cyber operations experts who applied their learnings to bring national security-grade technology solutions to commercial customers around the world, Blackpoint Cyber is in hyper-growth mode, fueled by a recent $190m series C round. Responsibilities As IT Systems Administrator, you are the hands-on operator of Blackpoint Cyber’s day-to-day IT environment. You will keep approximately 230 team members productive across macOS and Windows, run onboarding and offboarding, administer our SaaS stack, and keep devices, licenses, and assets accurate and secure. You will work from the priorities, standards, and runbooks set by the IT Operations Lead, handle Tier 2 escalations independently, and continually improve how the team delivers support. This is an individual-contributor role with no people management. We want someone who takes pride in a clean queue, a clean inventory, and a great user experience. Responsibilities Run day-to-day IT operations. Work the Jira Service Management queue, meet SLAs, and resolve Tier 1 and Tier 2 issues across macOS and Windows. Escalate identity, security, and architecture issues to the IT Operations Lead with clear context. Administer SaaS platforms. Handle daily administration of Microsoft 365, Slack, Google Workspace, Zoom, Atlassian user access, and the password manager, including users, groups, licenses, shared resources, and access requests. Resolve common M365 and account issues. Handle account lockouts, MFA problems, VPN and Teams issues, and SharePoint and OneDrive file recovery, escalating only when a runbook does not cover it. Execute identity and access tasks. Perform MFA resets and enrollments, group and role assignments, and routine Entra and SSO user administration within the policies set by the IT Operations Lead. Fulfill access and AI tool requests. Fulfill application access, license, and shared mailbox requests from the standard-access catalog, and assign AI tool seats and quotas within policy. Route exceptions and new-tool requests to the lead. Operate the endpoint fleet. Run Intune, Jamf, and Datto RMM day to day, including device enrollment and provisioning, app packaging and deployment, patch compliance, compliance remediation, and hardware refresh cycles. Own onboarding and offboarding execution. Deliver consistent, on-time new-hire setup and clean, auditable departures, including device collection, access removal, and license reclamation. Monitor workflow automations. Watch the Power Automate onboarding and offboarding flows, resolve routine failures using runbooks, and escalate flow problems to the IT Operations Lead. Manage assets and inventory. Maintain accurate hardware and software inventory, warranties, assignments, and disposal records. Coordinate shipping and returns for a distributed workforce. Report and gather compliance evidence. Produce device inventory and compliance reports from Intune, Jamf, and Datto RMM for leadership, audits, and renewals. Prepare periodic user and access review exports, follow up on non-compliant devices, reconcile device inventory, and verify offboarding completeness for SOC 2 and CMMC needs, following change and access procedures. Automate and improve. Use PowerShell, Bash, or Python to script routine tasks, propose improvements to the IT Operations Lead, and contribute to automating onboarding, offboarding, and reporting. Document as you go. Create and maintain knowledge base articles, runbooks, and how-to guides so the team and our users can self-serve. Support lab and VDI setups. Provision and maintain lab devices and VDI user setups for Engineering under the direction of the IT Operations Lead. Support vendors and renewals. Track license counts and renewal dates, and help with vendor and procurement tasks. Requirements ~3 to 5 years in IT support, systems administration, or IT operations, including Tier 2 experience. Strong hands-on experience supporting both macOS and Windows. Practical administration of Microsoft 365 and at least some of Slack, Google Workspace, and Zoom. Working experience with Microsoft Entra ID user and group administration, SSO, and MFA (admin-level, not architecture). Hands-on experience with an MDM or RMM platform such as Intune, Jamf, or Datto RMM. Scripting ability in PowerShell, Bash, or Python for routine automation. Experience with ticketing and service management tools (Jira Service Management preferred) and familiarity with ITIL fundamentals. Clear communicator with a service-oriented, accountable mindset. Nice to have Microsoft MD-102 or MS-102, Jamf 200, or CompTIA certifications. Experience with Auth0 or other SSO and identity providers. Experience gathering evidence in a SOC 2, CMMC, or ISO 27001 audited environment. Who Thrives in This Role A dependable operator who owns the queue and follows through. Someone who documents what they learn and automates what they repeat. A person who wants to grow technical depth, with a path toward identity or systems engineering. Someone comfortable in a remote, fast-moving environment. Blackpoint Cyber welcomes and encourages applications from qualified individuals of all races, colors, religions, sex, sexual orientation, gender identity or expression, national origin, age, marital status, or any other legally protected status. We are committed to equality of opportunity in all aspects of employment. For eligible employees in the US, Blackpoint offers competitive Health, Vision, Dental, and Life Insurance plans, a robust 401k plan, Discretionary Time Off, and other minor perks. International employees receive competitive benefits in accordance with local market standards and applicable country requirements. Blackpoint believes all employees should share in the company’s success – equity participation is available to employees globally, with program details varying by location and employment structure.
