Senior IT Engineer

ABOUT THE ROLE

You’ll run Morpho’s corporate IT: accounts and access, laptops, and the SaaS tools the company runs on, all set up securely. You’ll work closely with the security team: they set policy and lead on incidents, and you put that policy in place across our tools and devices. The scope is broad and the work is hands-on. We’d rather automate repetitive work than hire for it, so expect to write scripts and build your own tooling, using AI where it helps. We’ll go through our stack with you early in the process.

RESPONSIBILITIES

- Administer SSO, the directory and the password manager. Handle onboarding and offboarding, and run regular access reviews.

- Manage the Mac fleet: setup, MDM policies, OS and app updates, and keeping the endpoint security agent installed and working.

- Apply the security baselines and access policies the security team defines, and keep our tools configured to match.

- Administer our SaaS tools: setup, admin access and licences. Handle the IT side of bringing on new vendors.

- Support the security team during incidents by isolating devices, revoking access and pulling logs.

- Provide evidence for IT controls during audits.

- Automate repetitive work such as onboarding, offboarding, access reviews and evidence collection.

- Write and maintain documentation for IT procedures.

- Take part in IT on-call.

DEFINITION OF SUCCESS

- 1 month: handles onboarding, offboarding and day-to-day account and device work without help, and knows how our tools are set up.

- End of probation: owns our identity, device and SaaS setup, has automated at least one process that used to be manual, and is the person the security team goes to for IT changes and incident support.

- 12 months: runs corporate IT independently. Onboarding, offboarding, access reviews and audit evidence mostly run on tooling they built.

EXPERIENCE

- 5+ years in IT, systems engineering or IT security.

- Hands-on admin experience with an enterprise identity provider, an MDM and endpoint security tools.

- Strong macOS management: configuration profiles, privacy preference and system extension policies.

- Writes Python or Bash to automate work. Infrastructure as code is a plus.

- Has supported a SOC 2, ISO 27001 or similar audit.

- Knows crypto companies are frequent targets of phishing and social engineering, and sets up systems with that in mind. Web3 or fintech experience is a plus.

- Writes clear documentation.

- Prefers simple setups people follow over perfect ones they work around.

- Comfortable being part of an on-call rotation.