IT Support Engineer

Job Title: IT Support Engineer
Location: San Jose, CA (Onsite)
Job Type: Full-Time

Job Summary:
As an IT Engineer, you ll be the key to ensuring everyone can perform at their highest level. You ll be the trusted resource who keeps our high-performance engineering and operations environment running seamlessly, so teams can innovate without barriers. In this role, you ll drive company-wide productivity, empower engineers with tools and infrastructure to move at maximum velocity, and champion a culture of operational excellence across all systems. From enabling cutting-edge chip development workflows to streamlining day-to-day IT operations, you ll ensure nothing slows down our mission to build transformational AI innovation.

Key responsibilities
Provide hands-on IT delivery and support for the entire firm, including ASIC design teams, software and platform engineering, business operations, and scale-out computing teams.
Lead onboarding and offboarding processes to ensure seamless access aligned with engineering and leadership workflows.
Maintain robust documentation of IT assets, systems, access protocols, and ticket workflows.
Manage on-site and remote laptops, desktops, and networking equipment with attention to ease of use, security, and remote manageability.
Deploy and administer MDM and MAM solutions for Mac and Windows devices.
Implement and maintain antivirus, antimalware, Endpoint Detection & Response (EDR), and Extended Detection & Response (XDR).
Drive hardware procurement, staging, imaging, and maintenance for development and operations teams.
Implement and administer Single Sign-On (SSO) across core services, ensuring secure and frictionless user authentication. Okta experience a bonus
Automate user provisioning and deprovisioning workflows using Rippling, Okta, Google Workspace, and FreeIPA to streamline access management and reduce errors.
Enforce role-based access controls and audit trails to align with compliance and security standards.
Design, deploy, and maintain wired and wireless networks, including Wi-Fi access points (WAPs) and controller administration.
Configure and manage VPN infrastructure to provide secure remote access for distributed teams.
Administer firewalls, ensuring proper segmentation, policy enforcement, and protection of sensitive environments.
Develop automation scripts (Python, Bash, PowerShell) to streamline provisioning, patching, monitoring, and user lifecycle management.
Integrate monitoring and alerting systems to reduce manual workload and increase reliability.
Champion a culture of operational excellence, ensuring IT systems meet compliance standards (e.g., SOC 2, ISO 27001).
Coordinate with external vendors and partners to evaluate new products, support existing offerings, and to resolve IT issues.
Partner closely with engineering, security, and operations teams to align IT strategy with business and technical goals.

Representative projects:
Managing a mixed-OS engineering environment (Linux for EDA tools, Windows/macOS for general use) including imaging, patching, and security hardening.
Designing and maintaining secure network infrastructure (VPNs, VLANs, firewalls, access control) to protect sensitive chip design IP.
Implementing and managing endpoint/device lifecycle systems (procurement, setup, MDM, retirement) for engineering and operations teams.
Deploying and integrating compute resources (on-prem servers and cloud environments) to support large-scale simulations and hardware workflows.
Building scalable onboarding/offboarding and IT automation workflows to ensure fast, secure ramp-up for new engineers and smooth transitions.
Strong understanding of networking fundamentals: VPNs, VLANs, firewalls.
Skilled in endpoint management, system imaging, and hardware lifecycle management.
Proficient with ticketing systems and adept at prioritizing tasks in busy environments.
Excellent communication skills and ability to work effectively with engineering teams in fast-paced, innovative settings.

Required Experience:
5-7+ years in an IT support or engineering role with experience across macOS, Windows and Linux
Excellent problem-solving skills, with a proactive and ownership-driven mindset.
Experience working in a fast-paced startup environment.
Proven experience with endpoint management tools (e.g., Jump, Cloud, Jamf, Intune, Kandji).
Hands-on expertise in enterprise VPNs, wireless networking, and zero-trust access models.
Strong background in EDR/XDR platforms (e.g., ThreadDown, CrowdStrike, SentinelOne).
Scripting and automation proficiency (Python, Bash, PowerShell).
Knowledge of security best practices, incident response, and identity/access management (IAM).
Strong networking expertise, including configuring and troubleshooting TCP/IP, DNS, DHCP, VLANs, and firewalls.
Exposure to cloud platforms (AWS, Azure, GCP) or a developer-oriented compute infrastructure is a plus.