Senior IT Engineer
Posted Updated
Summary
Senior IT Engineer at Narmi (a fintech serving banks and credit unions) owns the Apple fleet in Jamf Pro and Google Workspace, builds identity and access controls (SSO, SCIM, MFA), automates employee lifecycle via scripting, and supports SOC 2 compliance. Based in New York City.
About the IT Team
IT at Narmi is a small, high-impact function that keeps our people productive and our systems secure. As a fintech serving banks and credit unions, the way we manage devices, identity, and access is part of the trust our customers place in us. We're looking for a Senior IT Engineer to own and scale the systems that make that possible, starting with Jamf and Google Workspace.
You'll have real influence on how IT runs at Narmi: which tools we adopt, how we automate the employee lifecycle, and how we meet the security and compliance expectations of the financial institutions we serve. Being a self-starter who sees what needs fixing and fixes it at the root is what makes people successful here.
What you'll do
- Own Narmi's Apple fleet end to end in Jamf Pro: enrollment, configuration profiles, policies, Smart Groups, patching, app deployment, and compliance reporting.
- Administer Google Workspace as our core productivity and identity platform, including organizational units, groups, sharing and security policies, and Google Vault.
- Build and maintain identity and access controls across our SaaS stack, including SSO, SCIM provisioning, and MFA enforcement.
- Automate the employee lifecycle so onboarding, role changes, and offboarding are fast, consistent, and auditable.
- Write scripts and integrations (Bash, Python, GAM, Jamf API) that remove manual work and fix recurring issues at the root.
- Partner with Security and Compliance on SOC 2 and customer audit requests by producing evidence, hardening endpoint baselines, and closing gaps.
- Serve as the escalation point for complex IT issues and help shape how support is delivered across the company.
- Evaluate, roll out, and document new tools as Narmi grows.
What you'll bring
- 5+ years of relevant, post-college IT or systems engineering experience
- Expert-level Jamf Pro experience managing a macOS fleet, including policies, configuration profiles, Smart Groups, extension attributes, and zero-touch deployment through Apple Business Manager
- Deep hands-on experience administering Google Workspace, including identity, security settings, groups, and data governance
- Experience with SSO and identity providers (Okta, Google, or similar), SCIM provisioning, and MFA
- Scripting proficiency in Bash, Python, or similar, and comfort working with APIs to automate workflows
- Ability to explain technical concepts with clarity and simplicity, whether to an engineer or an executive
- A strong sense of ownership and an eagerness to build systems that scale with the company
- Based in New York City or willing to relocate
- Authorized to work in the United States
Nice to have
- Jamf certifications (Jamf 300 or Jamf 400 / Certified Expert)
- Experience supporting SOC 2, PCI DSS, or similar audits
- Familiarity with AWS, especially IAM and account administration
- Experience with Jamf Connect, Jamf Protect, or other endpoint security tooling
- Background in fintech, financial services, or another regulated industry
- Experience building IT functions at a high-growth startup