Staff IT & Security Engineer

Enterprise AI Tools Ownership & Governance

Serve as the central technical owner for all internal enterprise AI platforms, including large language model tools, AI-assisted developer environments, and internally developed AI-powered systems

Manage vendor relationships, licensing, access controls, and secure configuration for all AI platforms

Establish and enforce org-wide best practices for safe AI adoption; monitor usage for compliance, privacy, and data protection risk

Maintain and extend the organization's internal AI automation platform — new capabilities, bug fixes, codebase documentation, and knowledge transfer to the team

Stay current on the enterprise AI tooling landscape; bring recommendations to the Head of IT on new tools, risks, and adoption opportunities

Security & Compliance

Develop and enforce security policies covering AI usage and data protection, endpoint standards, identity and access control, and acceptable use

Partner with Legal, Engineering, and Operations on governance frameworks and any applicable compliance requirements

Lead internal security reviews, access audits, and incident response planning across all properties and corporate systems

Own the organization's security posture roadmap — identify gaps, prioritize remediation, and track progress over time

Identity & Access Management Architecture

Own the architecture and governance layer for all identity systems:

Yesh ID — SSO Configuration, SAML integrations, app provisioning

Google Workspace — organizational structure, admin policies, OU management, API restrictions

Design and maintain RBAC structures, access tiers, and least-privilege policies across all platforms

Own identity governance: periodic access reviews, privilege audits, and lifecycle policy enforcement

Day-to-day provisioning and account ops are handled by the support and field technician team — this role owns the policies, configurations, and standards they execute against

SaaS Administration & Vendor Management

Own the SaaS portfolio: licensing, renewals, vendor relationships, and spend governance

Maintain accurate license counts across all platforms; surface consolidation or optimization opportunities to the Head of IT

Evaluate new SaaS tools through a security-first lens; own the procurement and onboarding process for new platforms

Manage vendor escalations for critical systems when issues exceed field team resolution

Own telecom platform relationships — UCaaS, VoIP, and business communication systems — including migrations, contract renewals, and platform consolidation opportunities

IT Budget Support & Financial Operations

Partner with the Head of IT to build and maintain the annual IT budget — tracking spend by category (hardware, software/SaaS, professional services, telecom, cloud infrastructure, and contingency) and by property

Maintain ongoing spend visibility across corporate IT card expenses, vendor invoices, and SaaS subscriptions; flag variances against budget in a timely manner

Support Finance on IT audit requests, spend reconciliations, and inception-to-date cost reporting by property or cost center

Own the IT SaaS renewal calendar — alert the Head of IT well in advance of renewals, flag price increases, and recommend renegotiation or replacement where warranted

Track cloud infrastructure costs (GCP, AWS) and identify rightsizing or commitment optimization opportunities

Support project-level budget tracking — monitor budget vs. actual for active IT projects and surface overruns early

Automation & Engineering

Design and build IT automation that reduces manual overhead and improves security posture across the organization

Build and maintain workflows for:

Automated user provisioning and access request management

AI cpmliance enforcement and usage monitoring

Infrastructure monitoring, alerting, and incident notification

IT spend reporting and operational dashboards for leadership

Write production-quality Python; maintain and extend existing automation, scripts, and integrations—

Serve as the engineering lead on cross-functional IT initiatives from design through delivery and handoff

Mentorship, Documentation & Strategic Support

Serve as the senior technical mentor for IT Support and Field Technician staff — technical guidance, escalation support, and professional development

Own documentation standards for the IT organization: ensure runbooks, SOPs, network diagrams, and system inventories are complete, accurate, and maintained

Act as a trusted technical advisor to the Head of IT — support vendor evaluations, technology roadmap planning, and cross-functional IT initiatives

Translate technical work into clear updates for IT leadership and cross-functional stakeholders