IT Operations Specialist

About Freshpaint:

Healthcare is a $4+ trillion industry in the U.S. alone, and it's undergoing a rapid digital transformation.

Hospitals, digital health companies, and life sciences organizations rely on analytics and advertising tools to reach patients, measure performance, and grow. But those tools weren't built for regulated healthcare data. That creates real compliance risk and forces teams to choose between growth and privacy.
Freshpaint eliminates that trade-off.

We're a privacy-first data platform that helps healthcare organizations use modern marketing and analytics tools without exposing protected health information (PHI). Freshpaint sits between a company's website or app and the third-party tools they use, automatically detecting and controlling sensitive data before it's shared.

In short: we let healthcare teams move fast, safely.
Backed by Top Investors

Freshpaint is backed by some of the most respected names in technology, including:

• Y Combinator (OpenAI, Stripe, Airbnb, Coinbase, DoorDash)
• Intel Capital (Broadcom, Astera Labs, VMware, RedHat, MongoDB)

We've raised tens of millions of dollars in funding to build the privacy infrastructure layer for healthcare's digital future.
Who we're looking for

We're looking for an organized, service-oriented IT operations professional who enjoys helping employees stay productive while keeping core IT processes running smoothly behind the scenes. This person should be detail-oriented, comfortable following and improving repeatable processes, and capable of handling device setup, access administration, troubleshooting, and compliance support with good judgment and strong follow-through.
What you'll be doing

In this role, you'll support the day-to-day IT operations that help Freshpaint scale, including onboarding and offboarding employees, maintaining secure and compliant laptops and accounts, resolving employee IT issues, and supporting access management and compliance-related operational work. You'll work closely with engineering and security leadership to execute priorities, keep documentation and operational processes current, and identify opportunities to turn repeat issues into better runbooks, workflows, and support practices. Success in this role requires strong troubleshooting judgment, attention to detail, and the ability to know when to resolve independently versus escalate.
Primary responsibilities

• Execute employee onboarding and offboarding accurately, securely, and on time
• Provision, maintain, and troubleshoot company laptops and employee endpoints
• Support employees with hardware, software, access, and account issues while delivering a fast, dependable support experience
• Handle employee access requests and changes with appropriate approvals and attention to least privilege, while supporting RBAC rollouts, access reviews, and cleanup work
• Support security questionnaires, audit evidence collection, and compliance-related operational processes
• Turn repeat issues into better documentation, runbooks, and lightweight process improvements.

Desired skills & experience

• Experience in IT support, IT operations, helpdesk, or a similar internal-facing technical support role
• Experience onboarding and offboarding employees across devices, accounts, and SaaS tools
• Familiarity with endpoint management, device provisioning, software installation, patching, and basic security hygiene
• Experience administering common internal tools such as identity, password management, collaboration, or device management systems
• Strong troubleshooting skills across laptops, employee software, access, and account issues
• Strong judgment when handling access changes, troubleshooting issues, and deciding when to follow a defined process versus escalate to the right partner.
• Clear written and verbal communication skills with a strong service mindset
• Strong organizational skills and the ability to manage recurring operational work with accuracy and follow-through
• Familiarity with common workplace IT and compliance tools such as Google Workspace, device management platforms, and access or compliance systems
• Experience with Mac administration or supporting primarily Mac-based employee environments

Nice to haves

• Experience supporting security or compliance-related operational work such as SOC 2, HITRUST, audit evidence gathering, or customer security questionnaires
• Experience working in a startup or high-growth SaaS environment
• Familiarity with tools such as Drata, Iru, Google Workspace, identity providers, or similar IT, endpoint, and compliance platforms
• Experience improving internal documentation, runbooks, or lightweight operational processes
• Experience with scripting or automation using tools or languages such as Python, JavaScript, or Go
• Familiarity with cloud platforms such as AWS, GCP, or Azure, and infrastructure tooling such as Terraform

Perks & Benefits

We take care of our team-here's a peek at what you get when you join:

• Competitive pay + generous equity (10-year exercise window)
• Half-day Fridays, every Friday
• 16 weeks fully paid parental leave (eligible after 6 months; commission-based roles receive 100% base salary during leave)
• Flexible PTO with a required 2-week minimum
• Top-tier health, dental & vision (100% covered for you, 80% for dependents)
• Intentional & engaging company offsites (past trips: Arizona, Jackson Hole, Nashville, New Orleans & more)

And more! Check out our careers page for the full list.