IT Operations Engineer

IT Operations Engineer

At gaiia, we're building the leading platform for Communications Service Providers (CSPs) that truly care about their customers. Our core product is an operating system (OS) for telcos that manages billing, operations, automation and everything in between.

We're passionate about taking care of our people, and it's not just lip service. We want you to focus on your job while we care for everything else. We offer competitive pay and benefits, attractive stock options, unparalleled transparency, and a 100% remote environment. We're excited to have you join us for your next career adventure!

We're looking to hire an IT Operations Engineer with a builder's mindset, profound curiosity and legendary communication abilities to own internal IT at gaiia. This is a true one-person IT army role: you'll build and run the function end to end, creating the systems and processes that keep our team productive, secure, and supported. As the first hire in this role, you'll report directly to the CTO and have the opportunity to shape the IT function while growing your career as gaiia scales.

You will be the go-to person for: access and permissions, device management, internal support, and the automations that make all of it run smoothly. You will also work closely with Engineering Leadership and the Platform squad on security and compliance topics, including our SOC 2 program.

In short: you'll handle internal support requests while also building systems and automations that reduce recurring issues and make you and the team more productive.

Our internal IT stack includes Rippling (HRIS & MDM), Apple Business Management, CrowdStrike, Google Workspace, Slack, Notion, and gaiia's Workflow Builder.

More pragmatically, you will:

• Administer our SaaS tools: users, groups, licenses, billing and settings.
• Manage access and permissions: process access requests, maintain SSO and Google Groups, and keep access least-privilege and auditable.
• Run the IT side of onboarding and offboarding: make sure every new hire is ready on day one, and every departure is fully revoked across all our tools, with the right evidence.
• Own our laptop fleet: maintain our Rippling MDM and Apple Business Manager setup (security settings, app deployments, OS updates), troubleshoot device issues, and handle wipes and buybacks.
• Be our internal helpdesk: be the first line of support for teammates, from locked laptops to broken SSO.
• Support security and compliance: SOC 2 evidence, access reviews, device compliance, vendor inventory in Drata, and yearly IT policy reviews.
• Most importantly: Build automations that make your life easier. Workflows, AI skills and autonomous agents, and anything else that turns recurring requests into self-serve experiences.

Here are some actual projects you would have worked on recently:

MDM pipeline overhaul: You'd have diagnosed why newly purchased laptops were shipping without their security software, traced it to broken packages and an overly narrow assignment rule, and rebuilt the deployment so every device is protected from first boot. You'd then have documented the whole purchase-to-managed-device pipeline as a reference anyone can use to debug and audit our fleet.

Self-serve access requests: You'd have replaced ad-hoc DMs with a Slack workflow, so every access request is captured, routed and traceable, making both day-to-day support and SOC 2 audits much easier.

Employee offboarding flow: You'd have turned offboarding into a repeatable checklist driven by our vendor inventory, so every access is revoked quickly, shared credentials are rotated, devices are recovered or wiped, and audit evidence is generated along the way.

The salary range for this role is $85,000-$115,000.

We are an equal-opportunity employer committed to inclusivity and diversity. Our workplace is fully remote and boasts accessible technologies, ensuring all team members can thrive. Should you require accommodations due to a disability during the application process, please contact us at View phone number on click.appcast.io or View email address on click.appcast.io as per the Accessible Canada Act and human rights legislation. We're here to support you every step of the way.