IT Engineer

Saronic Technologies is a leader in revolutionizing autonomy at sea, dedicated to developing state-of-the-art solutions that enhance maritime operations through autonomous and intelligent platforms. Saronic is seeking a highly skilled and experienced IT Engineer to join our dynamic IT team. The ideal candidate will have a broad range of IT knowledge, with expertise in systems administration, network management and technical support. This role requires a proactive professional who can manage complex IT projects, troubleshoot advanced technical issues, and contribute to the continuous improvement of our IT infrastructure.   As the IT Engineer, you will play a critical role in protecting Saronic from and mitigating risks to our groundbreaking ASV technology. Key Responsibilities - Manage the security, compliance and configuration of our macOS, Windows, Linux and mobile fleet using industry-leading tools like Microsoft Intune and Jamf (or similar). - Administer and support our Microsoft 365 environment, including tenant configuration, licensing, and the security and compliance settings that apply to users and devices. - Serve as an escalation point for complex endpoint, identity and device issues, driving root-cause analysis and documenting the fix. - Collaborate with cross-functional teams, including Information Security, Network Operations and Systems Engineering, to escalate and resolve enterprise-level issues. - Define and deploy automation opportunities across the IT stack to reduce manual work and improve consistency and reliability. - Design and roll out conditional access and security policies at scale across our fleet of endpoints, in partnership with the security team. - Automate OS, security and application patching, and proactively monitor fleet health and compliance to catch trends and fix problems before users are impacted. - Continuously improve the end-user experience through optimization, automation and streamlined processes. - Partner with OT and engineering teams to support device and access needs in OT-adjacent environments. - Support the device lifecycle, from provisioning and deployment through refresh and retirement. - Take ownership of special projects, involve the relevant teams, and ensure timely completion. - Document work clearly, including procedures, configurations and runbooks, and follow internal security policies and change management practices. Qualifications - Bachelor’s degree in Computer Science, Information Systems, Engineering, or a related field (or equivalent experience). - 4+ years of experience in endpoint engineering, systems engineering, or a similar corporate IT engineering role. - Hands-on experience administering Jamf Pro or a similar macOS management platform in a production environment, including enrollment, profiles, policies, scripting and patching. - Hands-on experience administering Microsoft Intune or a similar management platform for Windows and mobile devices, and working knowledge of an identity platform such as Entra ID or Okta, including conditional access and device compliance. - Proficiency in at least one scripting language (PowerShell, Python or Bash) and experience automating administrative tasks, ideally through REST or Graph APIs. - Solid understanding of macOS and Windows internals, device enrollment and provisioning workflows, and troubleshooting methodology. - Working knowledge of networking and identity fundamentals (TCP/IP, DNS, DHCP, Wi-Fi and 802.1X, VPN or ZTNA, certificates and PKI). - Working knowledge of SSO and SCIM provisioning through identity platforms such as Entra ID or Okta, including how identity and device signals work together. - Proven ability to serve as an escalation point: diagnosing complex issues, communicating clearly with technical and non-technical stakeholders, and documenting outcomes. - Strong customer-service skills and a data-driven approach to identifying and resolving common issues. - Strong attention to detail and sound judgment when rolling out changes that affect the entire fleet. Preferred Qualifications - Experience supporting or collaborating with OT, industrial or manufacturing environments, including familiarity with segmented networks and the constraints of OT-adjacent systems. - Experience working in a defense, aerospace or other regulated environment, with familiarity with frameworks such as NIST 800-171 or CMMC. - Experience with EDR and security tooling (e.g., CrowdStrike, Microsoft Defender). - Experience with modern configuration management and application packaging tools, and with source control or CI/CD approaches to managing device configuration. - Familiarity with Linux endpoints and cloud platforms such as AWS/AWS GovCloud or Azure. - Willingness and eligibility to obtain a U.S. security clearance. - Industry certifications such as Jamf Certified Tech or Admin, Microsoft MD-102 or SC-300, or CompTIA Security+. Benefits - Medical Insurance: Comprehensive health insurance plans covering a range of services - Saronic pays 100% of the premium for employees and 80% for dependents - Dental and Vision Insurance: Coverage for routine dental check-ups, orthodontics, and vision care - Saronic pays 99% of the premium for employees and 80% for dependents - Time Off: Generous PTO and Holidays - Parental Leave: Paid maternity and paternity leave to support new parents - Competitive Salary: Industry-standard salaries with opportunities for performance-based bonuses - Retirement Plan: 401(k) plan - Stock Options: Equity options to give employees a stake in the company’s success - Life and Disability Insurance: Basic life insurance and short- and long-term disability coverage - Additional Perks: Free lunch benefit and unlimited free drinks and snacks in the office  Physical Demands - Prolonged periods of sitting at a desk and working on a computer.   - Occasional standing and walking within the office.   - Manual dexterity to operate a computer keyboard, mouse, and other office equipment.   - Visual acuity to read screens, documents, and reports.   - Occasional reaching, bending, or stooping to access file drawers, cabinets, or office supplies.   - Lifting and carrying items up to 20 pounds occasionally (e.g., office supplies, packages).  This role requires access to export-controlled information or items that require “U.S. Person” status. As defined by U.S. law, individuals who are any one of the following are considered to be a “U.S. Person”: (1) U.S. citizens, (2) legal permanent residents (a.k.a. green card holders), and (3) certain protected classes of asylees and refugees, as defined in 8 U.S.C. 1324b(a)(3) https://usg02.safelinks.protection.office365.us/?url=https%3A%2F%2Fwww.govinfo.gov%2Flink%2Fuscode%2F8%2F1324b&data=05%7C02%7CGrant.Herod%40saronic.com%7C0741723dfecb481cbd7708ddbf29ba35%7C97799b1f9a79413192f4d7e1a1e8fbf9%7C0%7C0%7C638876908118279060%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=A4VLCF5jKORn72GiPpDQX9drl8UKMVSpIu4TIWXeTL0%3D&reserved=0.    Saronic does not discriminate on the basis of race, sex, color, religion, age, national origin, marital status, disability, veteran status, genetic information, sexual orientation, gender identity or any other reason prohibited by law in provision of employment opportunities and benefits.     If this role is based in the United States, it requires access to export-controlled information or items that require “U.S. Person” status. As defined by U.S. law, individuals who are any one of the following are considered to be a “U.S. Person”: (1) U.S. citizens, (2) legal permanent residents (a.k.a. green card holders), and (3) certain protected classes of asylees and refugees, as defined in 8 U.S.C. 1324b(a)(3) https://www.govinfo.gov/link/uscode/8/1324b. Saronic does not discriminate on the basis of race, sex, color, religion, age, national origin, marital status, disability, veteran status, genetic information, sexual orientation, gender identity or any other reason prohibited by law in provision of employment opportunities and benefits. We are also committed to providing reasonable accommodations for qualified individuals with disabilities.