Senior IT Engineer

About the IT TeamIT at Narmi is a small, high-impact function that keeps our people productive and our systems secure. As a fintech serving banks and credit unions, the way we manage devices, identity, and access is part of the trust our customers place in us. We're looking for a Senior IT Engineer to own and scale the systems that make that possible, starting with Jamf and Google Workspace.You'll have real influence on how IT runs at Narmi: which tools we adopt, how we automate the employee lifecycle, and how we meet the security and compliance expectations of the financial institutions we serve. Being a self-starter who sees what needs fixing and fixes it at the root is what makes people successful here.What you'll doOwn Narmi's Apple fleet end to end in Jamf Pro: enrollment, configuration profiles, policies, Smart Groups, patching, app deployment, and compliance reporting.Administer Google Workspace as our core productivity and identity platform, including organizational units, groups, sharing and security policies, and Google Vault.Build and maintain identity and access controls across our SaaS stack, including SSO, SCIM provisioning, and MFA enforcement.Automate the employee lifecycle so onboarding, role changes, and offboarding are fast, consistent, and auditable.Write scripts and integrations (Bash, Python, GAM, Jamf API) that remove manual work and fix recurring issues at the root.Partner with Security and Compliance on SOC 2 and customer audit requests by producing evidence, hardening endpoint baselines, and closing gaps.Serve as the escalation point for complex IT issues and help shape how support is delivered across the company.Evaluate, roll out, and document new tools as Narmi grows.What you'll bring5+ years of relevant, post-college IT or systems engineering experienceExpert-level Jamf Pro experience managing a macOS fleet, including policies, configuration profiles, Smart Groups, extension attributes, and zero-touch deployment through Apple Business ManagerDeep hands-on experience administering Google Workspace, including identity, security settings, groups, and data governanceExperience with SSO and identity providers (Okta, Google, or similar), SCIM provisioning, and MFAScripting proficiency in Bash, Python, or similar, and comfort working with APIs to automate workflowsAbility to explain technical concepts with clarity and simplicity, whether to an engineer or an executiveA strong sense of ownership and an eagerness to build systems that scale with the companyBased in New York City or willing to relocateAuthorized to work in the United StatesNice to haveJamf certifications (Jamf 300 or Jamf 400 / Certified Expert)Experience supporting SOC 2, PCI DSS, or similar auditsFamiliarity with AWS, especially IAM and account administrationExperience with Jamf Connect, Jamf Protect, or other endpoint security toolingBackground in fintech, financial services, or another regulated industryExperience building IT functions at a high-growth startup