IT Administrator, Wander

• 4+ years administering corporate IT for a distributed workforce of 150 + employees
• Proven expertise with modern MDM solutions and zero-touch provisioning workflows
• Hands-on experience securing laptops and mobile devices with disk encryption, EDR tooling, and OS-level hardening
• Deep familiarity with Google Workspace, Slack Enterprise Grid, and SSO/MFA best practices
• Comfortable in Linux server environments and fluent in networking fundamentals (DNS, DHCP, VLANs, VPNs, firewalls)
• Ability to script/automate repetitive tasks (Bash or Python)
• Demonstrated experience leading security-awareness initiatives and coordinating incident-response efforts
• Strong budget-management, project-management, and concise written-communication skills
• Based in (or willing to relocate to) the San Francisco Bay Area and comfortable with a hybrid on-site rhythm

Desirable

• Reporting to Wander’s CTO, you’ll be our first dedicated IT Administrator, owning the entire corporate-device lifecycle: procurement, provisioning, security, support, and retirement, while scaling programs that keep a global team of ~200 employees secure and productive
• You’ll also drive security-awareness training, incident-response coordination, network-infrastructure oversight, and the roadmap toward SOC 2 compliance, championing a culture of operational excellence and trust
• Device & Asset Management
• Establish a scalable procurement program for laptops, mobile devices, and peripherals
• Maintain accurate asset inventories, refresh schedules, and RMA workflows
• Endpoint Security & Compliance
• Deploy and administer an MDM platform across macOS, Windows, iOS, and Android fleets
• Enforce disk-encryption, OS-patching, and EDR baselines aligned with CIS benchmarks
• Roll out and manage a company-wide YubiKey (hardware MFA) program
• Document and maintain evidence for SOC 2 controls in a governance platform and coordinate external IT security audits
• Identity & SaaS Administration
• Handle non-automated Google Workspace and Slack changes (aliases, groups, channel permissions)
• Collaborate with Engineering to expand identity automation and SSO coverage
• Network Infrastructure Oversight
• Manage office and hub network gear (firewalls, switches, Wi-Fi) and coordinate SD-WAN/VPN solutions for remote staff
• Monitor performance and drive continuous improvements in reliability and security
• Security Awareness & Incident Response
• Design and deliver quarterly phishing simulations and security-training programs
• Act as first responder for IT-related security incidents, ensuring effective logging, forensics, and root-cause analysis
• Hardware Budget Forecasting & Continuous Improvement
• Forecast annual hardware spend in partnership with Finance and track variances
• Monitor KPIs (device health, ticket volumes, SLA adherence) and present quarterly recommendations to leadership
• Build self-service resources that drive ticket deflection and keep first-response SLAs low