IT Administrator

About the role We are hiring an IT Administrator to own our internal IT and security operations: endpoints, identity, aaccess, networking and core SaaS tools. You will keep every laptop, account and system secure, compliant and running smoothly, so our teams can build and operate financial products with confidence. You will be the go-to person for Google Workspace, Jamf, Jira, GitHub and our Wazuh SIEM, and you will work closely with engineering, security and compliance.

In a regulated fintech environment, that means getting the details right: least-privilege access, auditable changes and fast response when something looks wrong. Key responsibilities Endpoint management (Jamf) Administer Jamf Pro for the full macOS (and iOS, where applicable) fleet: enrollment, zero-touch provisioning via Apple Business Manager, and offboarding. Build and maintain configuration profiles, policies and smart groups for FileVault encryption, firewall, screen lock, Gatekeeper and OS update enforcement.

Deploy and patch applications, and keep the fleet aligned with CIS benchmarks. Manage hardware inventory, device lifecycle and remote lock or wipe for lost or compromised devices. Identity and access management (Google Workspace) Administer Google Workspace as the primary identity provider: users, groups, organizational units and SSO (SAML/OIDC) to connected apps. Enforce MFA (security keys or passkeys preferred), password policies, context-aware access and session controls.

Own joiner, mover and leaver processes, with access granted on least-privilege and role-based principles. Run periodic access reviews and keep auditable records of approvals and changes. Configure Gmail security (SPF, DKIM, DMARC), DLP rules and Drive sharing restrictions. Jira and GitHub administration Administer Jira: projects, workflows, permission schemes, user provisioning and integrations. Administer the GitHub organization: teams, repository permissions, SSO enforcement, branch protection rules and required reviews.

Manage GitHub security features such as secret scanning, Dependabot and audit log monitoring, in partnership with engineering. Security monitoring (Wazuh SIEM) Operate and maintain Wazuh: agent deployment across endpoints and servers, rule tuning and log source onboarding (Google Workspace, GitHub, cloud and network logs). Triage alerts, investigate suspicious activity and escalate or handle incidents following our response runbooks.

Use Wazuh for file integrity monitoring, vulnerability detection and compliance reporting. Network and VPN Manage the corporate VPN or zero-trust network access solution, including client deployment, access policies and certificate management. Maintain office network infrastructure: Wi-Fi (WPA3-Enterprise), firewall rules, network segmentation and guest isolation. Security and compliance Implement and document security controls that support our compliance obligations (for example SOC 2, ISO 27001, PCI DSS, DORA and GDPR).

Collect evidence for audits and help answer security questionnaires from partners and regulators. Write and maintain IT policies, runbooks and system documentation. Run security awareness basics, such as phishing simulations and onboarding training. IT support Provide day-to-day IT support to employees, and onboard new joiners with a ready-to-use, secure setup on day one. Evaluate, purchase and manage SaaS tools and licenses, keeping costs and shadow IT under control.

Required qualifications 3+ years in IT administration or systems administration, ideally in a fast-growing or regulated company. Hands-on experience administering Google Workspace, including SSO, MFA, groups and security settings. Hands-on experience with Jamf Pro (or a comparable MDM) managing a macOS fleet. Working knowledge of Jira and GitHub administration: permissions, SSO and user lifecycle. Experience with a SIEM (Wazuh strongly preferred) and basic incident triage.

Solid networking fundamentals: TCP/IP, DNS, DHCP, VLANs, firewalls and VPN technologies. Comfort with scripting for automation (Bash, Python or similar) and with APIs. A security-first mindset: least privilege, change control, documentation and audit trails. Clear written communication and a helpful, service-oriented attitude. Fluent English. Nice to have Experience in fintech, banking or payments, and familiarity with SOC 2, ISO 27001, PCI DSS or DORA audits.

Experience with zero-trust access tools (for example Tailscale, Cloudflare Zero Trust or similar). Cloud fundamentals on AWS, GCP or Azure, especially IAM and logging. Infrastructure-as-code or configuration-as-code experience (Terraform, GAM, Jamf API). Certifications such as Jamf Certified Admin, Google Workspace Administrator, CompTIA Security+ or similar. Some Windows or Linux endpoint management experience. What we offer Ownership of IT and security operations, with real influence over tools and processes.

Close collaboration with engineering, security and compliance teams. [Salary range, contract type (B2B or employment contract) and equity, if applicable] Work model: hybrid in Warsaw Benefits: sports card (Multisport)