IT Engineer

A great candidate is excited to support our growing use of data, including working closely with the  analytics and product engineering teams, to build a better user experience. Finally, they believe in Raya’s vision, which is to enrich lives by fostering relationships through quality, in person interactions.As Raya’s first dedicated IT team member, you will keep our team productive and secure. This is an engineering role, you'll write code and build automation to solve problems at scale, not just resolve tickets one at a time. You'll evolve and mature our IT infrastructure while working closely with our Infrastructure team.

A great candidate is excited to support our growing use of data, including working closely with the  analytics and product engineering teams, to build a better user experience. Finally, they believe in Raya’s vision, which is to enrich lives by fostering relationships through quality, in person interactions.As Raya’s first dedicated IT team member, you will keep our team productive and secure. This is an engineering role, you'll write code and build automation to solve problems at scale, not just resolve tickets one at a time. You'll evolve and mature our IT infrastructure while working closely with our Infrastructure team.
In This Role You Will:
Own the employee technology experience end to end in a primarily Mac environment, fixing problems and eliminating the conditions that cause them.

Manage the full MacBook fleet: procurement, provisioning, inventory, hardware refresh, and decommissioning

Own MDM and zero-touch provisioning (Kandji/FleetDM, Apple Business Manager) so new devices configure automatically on first boot

Administer Okta and identity lifecycle: provisioning, MFA, SSO integrations, and Okta Workflows, plus secrets management (1Password/Infisical)

Administer the core SaaS stack (Google Workspace, Slack, Notion, Jira) and automate user lifecycle management via APIs, while tracking licenses and spend

Run seamless onboarding and offboarding: automated workflows that get new hires fully configured on day one and cleanly deprovision departing employees

Drive proactive reliability and automation: monitor device health and access patterns, build self-healing scripts, and treat recurring issues as engineering problems to solve permanently

Support compliance and documentation: maintain security baselines, build an AI-powered self-service knowledge base, and own IT runbooks and internal comms

Co-manage our secure network access tools (Cloudflare Access, iBoss) and network/firewall policy with your Infrastructure teammates
Qualifications:
4–6 years of IT experience at a technology company, with a service-oriented mindset. You measure success by how unblocked your colleagues are.

Hands-on MDM experience managing a MacOS fleet (Kandji, FleetDM, or similar), including Apple Business Manager and zero-touch provisioning

Solid Okta administration: SSO, MFA, Lifecycle Management, and Workflows, plus SCIM provisioning across SaaS tools

Strong scripting and automation skills (Bash, Python, or similar)

Experience administering a secrets management platform (1Password, Infisical, or similar) and proficiency with the Google Workspace admin console, APIs, and Jira

Familiarity with secure network access platforms (Cloudflare Access, iBoss, or similar) and strong network troubleshooting skills (DNS, DHCP, VPN, Wi-Fi)

Experience running a ticketing system (Zendesk, Jira Service Management, or similar)