IT Engineer

AIM is seeking an IT Engineer to be our on-site technology partner as we scale. This is not a break-fix ticket queue. You will own the systems, devices, and identity infrastructure that keep our engineers, operators, and business team running securely at speed.

You will execute day-to-day end-user support while simultaneously leading foundational IT projects that set AIM up to scale securely: a full Okta identity rollout, Windows device/endpoint management, Mac device management via SimpleMDM, Google Workspace cleanup and automation, and assisting with security compliance readiness. You will work closely with Operations, Engineering, and Leadership to make sure our infrastructure never becomes the bottleneck.

• Serve as the first line of support for all hardware, software, printer, Wi-Fi, and general device issues

• Manage VPN access and remote connectivity for distributed team members

• Support conference room AV equipment, meeting room displays, and Joan room-scheduling devices

• Manage onsite networking hardware and infrastructure (Wi-Fi Access Points, Switches, Firewalls)

• Bring in outside vendors or specialists to solve in-house networking issues.

• Deploy and Administer Okta as AIM’s primary identity provider: user lifecycle, SSO integrations, and app assignments

• Own and manage company device management through SimpleMDM and Intune and/or similar, including managing device policies and automatic provisioning when applicable

• Execute and continuously improve onboarding and offboarding workflows from account provisioning to device setup to access revocation

• Enforce device compliance baselines that protect company IP and meet security requirements

• Manage Google Workspace: group structure, OU administration, permissions, and admin settings

• Own software subscriptions and licenses — assign seats, reclaim unused licenses, and control costs

• Maintain SSO integrations and automate provisioning/deprovisioning across the SaaS stack

• Troubleshoot on-site Wi-Fi performance and network issues; oversee expansion of internal network infrastructure (additional Ethernet drops, etc.)

• Design and maintain guest Wi-Fi segmentation so visitor access is simple and secure

• Administer visitor check-in workflows, badge issuance, and access photo processes

• Maintain spam filtering, phishing protection, and cybersecurity hygiene baselines

• Support audits and compliance reviews as AIM’s operational footprint grows

In addition to ongoing support, you will lead a set of high-priority projects that build AIM’s IT foundation:

• Okta deployment and full rollout as AIM’s primary IdP, replacing Google Workspace in that role

• Deploy Windows device management rollout via Intune (or similar) and finalize SimpleMDM policy alignment for Macs

• Google Workspace redesign: rationalize OU vs. group structure, define role-based access, and establish scalable email group architecture

• Guest Wi-Fi redesign and network segmentation

• Visitor check-in and badging workflow: initial design and rollout

• Security compliance readiness: implement IT controls, close identified gaps, and build documentation that scales

• 3+ years of IT support or systems administration experience in a professional environment

• Hands-on experience with Google Workspace administration, Microsoft Intune, and Okta (or comparable IdP)

• Proficiency supporting both Windows and macOS devices; experience with MDM platforms (Intune, SimpleMDM, Jamf, or equivalent)

• Working knowledge of networking fundamentals: VLANs, Wi-Fi, VPN, DNS/DHCP

• Comfort managing networking hardware (switches, firewalls) in the Juniper ecosystem

• Ability to manage competing priorities and communicate clearly with non-technical teammates

• Hands-on approach — equally comfortable owning a strategic rollout and untangling a conference room cable

• Familiarity with CMMC, NIST SP 800-171, Cloud Security Alliance or other compliance frameworks

• Experience designing or improving automated provisioning/deprovisioning workflows

• Scripting or automation skills

• A/V setup and event support experience

• CompTIA A+, Network+, Security+, or similar certifications

This role is hybrid, based in or around Seattle, WA, but due to the nature of the work in-office visits will likely be regular.

In your first 30 days, you will have met every key stakeholder, audited the current state of devices, identity, and network infrastructure, and delivered a prioritized plan for the Year 1 foundational projects.

By 60 days, onboarding and offboarding workflows will be tightened, the Okta rollout will be underway, and day-to-day support will run without friction.

By 90 days, AIM’s device management, identity infrastructure, and compliance posture will be materially stronger and you will have built the foundation for them to scale with the company.