Corporate IT Administrator (Systems & Security) at Morpho

You’ll run Morpho’s corporate IT: accounts and access, laptops, and the SaaS tools the company runs on, all set up securely. You’ll work closely with the security team: they set policy and lead on incidents, and you put that policy in place across our tools and devices.

The scope is broad and the work is hands-on. We’d rather automate repetitive work than hire for it, so expect to write scripts and build your own tooling, using AI where it helps. We’ll go through our stack with you early in the process.

Responsibilities:

• Administer SSO, the directory, and the password manager. Handle onboarding and offboarding, and run regular access reviews.
• Manage the Mac fleet: setup, MDM policies, OS and app updates, and keeping the endpoint security agent installed and working.
• Apply the security baselines and access policies the security team defines, and keep our tools configured to match.
• Administer our SaaS tools: setup, admin access, and licenses. Handle the IT side of bringing on new vendors.
• Support the security team during incidents by isolating devices, revoking access, and pulling logs.
• Provide evidence for IT controls during audits.
• Automate repetitive work such as onboarding, offboarding, access reviews, and evidence collection.
• Write and maintain documentation for IT procedures.
• Take part in IT on-call.

Definition of Success:

• 1 month: handles onboarding, offboarding, and day-to-day account and device work without help, and knows how our tools are set up.
• End of probation: owns our identity, device, and SaaS setup; has automated at least one process that used to be manual; and is the person the security team goes to for IT changes and incident support.
• 12 months: runs corporate IT independently. Onboarding, offboarding, access reviews, and audit evidence mostly run on tooling they built.

Experience Requirements:

• 5+ years in IT, systems engineering, or IT security.
• Hands-on admin experience with an enterprise identity provider, an MDM, and endpoint security tools.
• Strong macOS management: configuration profiles, privacy preference, and system extension policies.
• Writes Python or Bash to automate work. Infrastructure as code is a plus.
• Has supported a SOC 2, ISO 27001, or similar audit.
• Knows crypto companies are frequent targets of phishing and social engineering, and sets up systems with that in mind. Web3 or fintech experience is a plus.
• Writes clear documentation.
• Prefers simple setups people follow over perfect ones they work around.
• Comfortable being part of an on-call rotation.