TrueFoundry

Enterprise AI gateway and deployment platform

IT Manager

System AdministrationUpdated on Nov 13

Full-timeBengaluru, Karnataka, IndiaNo salary listedIn-person

About the Job

Requirements

At least 7 years of experience in IT operations, including at least 3 years at a SaaS or technology company with 100–500 people.
Hands-on expert-level administration of Google Workspace.
Hands-on experience with Okta or a similar identity provider such as JumpCloud or Entra ID, including SAML, OIDC, and SCIM provisioning.
Hands-on experience with Mac MDM using Jamf, Kandji, Mosyle, or Intune for macOS, plus an EDR tool.
Experience supporting at least one SOC 2 or ISO 27001 audit and personally producing audit evidence.
Working knowledge of AWS, GCP, or Azure IAM sufficient to manage console access and SSO into cloud accounts.
Scripting experience in at least one of Python, Bash, or Apps Script.
Ability to write clear documentation for systems and processes built.

Responsibilities

Own corporate IT and IT security end-to-end for approximately 150 people, including identity, devices, SaaS, and IT controls tested by auditors.
Administer Google Workspace, including organizational units, groups, security settings, DLP, context-aware access, and email security using SPF, DKIM, and DMARC.
Manage identity and access in Okta and 1Password, including SSO and enforced MFA for SaaS applications, role-based and privileged access, and quarterly access reviews with evidence.
Automate joiner, mover, and leaver processes with HR so that offboarding removes all access within 24 hours.
Manage the Mac-first device fleet, plus some Windows and Linux devices, through MDM, including enrollment, disk encryption, OS patching, screen lock, EDR, and remote wipe.
Maintain complete asset and SaaS inventories, identify and remove shadow IT, and manage licenses and IT spend.
Manage IT vendors and conduct security reviews of IT tools with the GRC Lead.
Maintain integrations among Google Workspace, Okta, 1Password, Slack, GitHub, Cloudflare, and MDM; keep personnel and account mapping accurate; run Vanta access reviews; and maintain passing identity, device, and offboarding tests as audit evidence for SOC 2, ISO 27001, ISO 27701, and HIPAA.
Run security-awareness training and phishing simulations, and track completion.
Handle IT helpdesk and onboarding, and write runbooks to support scaling.
Own office and remote network security, including Wi-Fi, firewall, VPN or zero-trust access, and guest isolation.
Execute IT components of incident response, backup, and business-continuity tests.
Automate repetitive work using Google Apps Script, Python, Bash, GAM, and MDM APIs.

Desired Qualifications

Experience using the Vanta agent, Vanta access reviews, or Vanta personnel onboarding and offboarding workflows.
Google Workspace Administrator, Jamf 200/300, CompTIA Security+, or ISO 27001 Lead Implementer certification.
Experience with zero-trust access tools such as Cloudflare, Tailscale, or Zscaler, and SaaS security posture tools.
Experience with Vanta is ideal; experience with Drata or Secureframe is acceptable if able to ramp up on Vanta during the first month.

About the role
Our customers expect us to meet SOC 2, ISO 27001, GDPR, HIPAA and ISO 42001. You will be our first IT hire and will own corporate IT and IT security end-to-end for ~150 people: identity, devices, SaaS, and the IT controls auditors test. This is a builder role. You will configure, script and fix things yourself.
What you will do

Own Google Workspace administration: org units, groups, security settings, DLP, context-aware access, email security (SPF, DKIM, DMARC).
Run identity and access in Okta and 1Password: SSO and enforced MFA for every SaaS app (Cloudflare, Slack, GitHub, cloud consoles), role-based access, privileged access, and quarterly access reviews with evidence.
Automate the joiner, mover and leaver process with HR, so offboarding removes all access within 24 hours.
Manage the Mac-first fleet (plus some Windows/Linux) through MDM: enrollment, disk encryption, OS patching, screen lock, EDR, and remote wipe.
Keep a complete asset inventory and SaaS inventory; find and remove shadow IT; manage licences and IT spend.
Own IT vendor management and security reviews of IT tools together with the GRC Lead.
Keep the Google Workspace, Okta, 1Password, Slack, GitHub, Cloudflare and MDM integrations healthy; keep personnel and account mapping accurate; run Vanta access reviews; and keep every identity, device and offboarding test passing as audit evidence for SOC 2, ISO 27001, ISO 27701 and HIPAA.
Run security awareness training and phishing simulations; track completion.
Handle IT helpdesk and onboarding; write runbooks so it scales.
Own office and remote network security: Wi-Fi, firewall, VPN or zero-trust access, and guest isolation.
Execute IT parts of incident response, backup and business continuity tests.
Script repetitive work (Google Apps Script, Python, Bash, GAM, MDM APIs).

What you must have

7+ years in IT operations, 3+ of them at a SaaS or tech company of 100–500 people.
Hands-on, expert-level Google Workspace admin.
Hands-on with Okta (or a similar IdP such as JumpCloud or Entra ID): SAML, OIDC, SCIM provisioning.
Hands-on Mac MDM (Jamf, Kandji, Mosyle or Intune for macOS), plus an EDR tool.
Have supported at least one SOC 2 or ISO 27001 audit and produced evidence yourself, ideally through Vanta (Drata or Secureframe is acceptable if you can ramp on Vanta in the first month).
Working knowledge of AWS, GCP or Azure IAM, enough to manage console access and SSO into cloud accounts.
Scripting in at least one of Python, Bash, or Apps Script.
Clear writing: you document what you build.

Nice to have

Has used the Vanta agent, Vanta access reviews or Vanta personnel onboarding/offboarding workflows.
Certifications: Google Workspace Administrator, Jamf 200/300, CompTIA Security+, ISO 27001 Lead Implementer.
Experience with zero-trust access (Cloudflare, Tailscale, Zscaler) and SaaS security posture tools.

About the Company

TrueFoundry

Enterprise AI gateway and deployment platform

TrueFoundry provides an Enterprise Platform as a Service to build, ship, and govern Agentic AI applications at scale with its AI Gateway and Agentic Deployment platform. The AI Gateway combines LLM, MCP, and Agent Gateways to give a single control plane for managing, observing, and governing all components of Gen AI apps with FinOps controls. The Agentic Deployment platform runs on Kubernetes-native infrastructure to deploy models on GPUs, run AI agents, and host MCP servers, with on-prem, multi-cloud, or hybrid options and data residency plus enterprise compliance. Its goal is to be the central control plane for Agentic AI at scale within enterprises, enabling multi-agent systems to form a self-sustaining ecosystem that speeds innovation.

Company size: 51-200
Company stage: Series A
Total funding: $21.3M
Headquarters: San Francisco, CA
Founded: 2021

Recently Posted Jobs

Explore more opportunities at TrueFoundry

See more jobs