IT Manager (m/f/d)

Languages: Fluent English (C1+), written and spoken, is our only language requirement. Spanish is preferred but not required; German or Portuguese could also be beneficial (we are a global group) Role summary This is a hands-on, high-ownership role: you will be the sole in-house IT owner for the entire group, responsible for internal IT across all our locations and remote employees worldwide. You will own our internal cloud services (such as Microsoft 365 and Google Workspace), our portfolio of internally-used SaaS tools, identity and access management, our endpoint fleet, and our internal IT security and compliance posture—working with external providers where it makes sense, and automating wherever possible. To be clear about ownership: we draw a hard line between product and internal. Our production cloud — the platform we build, sell, and operate for customers — and the internally-used tools that are part of that platform are owned by Engineering, and are not part of this role. Everything internal-facing — the hardware, software, and services our employees use to do their work — is yours. Your mission is to give every employee a great IT experience: effective, modern tools that scale their impact, while keeping the company secure and compliant without making everyday work painful. We expect you to use automation, scripting, and AI tools to accelerate your work—not as a novelty, but as a core part of how you operate, so that one person can run IT for a growing global group. Key responsibilities

• Own and administer our cloud productivity platforms (Microsoft 365 and Google Workspace) and the group-wide SaaS portfolio: procurement, licensing, inventory, access reviews, renewals, and cost optimization.
• Own identity and access management across the group: SSO, MFA, conditional access, and least-privilege role management.
• Own the joiner-mover-leaver lifecycle in coordination with HR: automated provisioning and deprovisioning of accounts, access, and equipment.
• Manage workstation and mobile device provisioning, maintenance, auditing, and security globally via modern MDM — covering Windows, macOS, Linux, iOS, and Android.
• Own office IT infrastructure: internet connectivity, Wi-Fi, networking, and printers across our physical offices (4 today, and growing), plus mobile phone plans for employees.
• Own the internal IT security posture: endpoint protection, patching, encryption, phishing defenses, backup, and security awareness.
• Drive and evidence compliance with SOC 2 and ISO 27001 for internal IT controls (product/platform controls are owned by Engineering); support audits and close findings.
• Provide responsive, high-quality IT support to employees across time zones, with self-service and documentation that reduce ticket volume.
• Leverage your customer service and technical skills to serve as a backup to the customer support team, if needed.
• Automate repetitive IT work (scripting, workflow tools, integrations between our systems) wherever possible.
• Continuously evaluate and roll out tools—including AI tools—that make employees more effective.
• Manage external IT vendors and service providers.
• Support IT integration of newly acquired companies as our M&A roadmap progresses. What you bring (must-have)
• 5+ years in internal IT / IT operations, including experience owning IT (not just executing tickets) in a multi-site or international environment.
• Hands-on administration of Microsoft 365 or Google Workspace at the tenant level.
• Experience with a modern identity provider (Entra ID, Okta, or similar): SSO, MFA, lifecycle automation.
• Experience managing endpoint fleets with MDM in a heterogeneous environment (we have Windows, macOS, Linux, iOS, and Android).
• Working knowledge of SOC 2 and/or ISO 27001 controls, and experience with audit evidence collection.
• Scripting/automation ability (e.g., PowerShell, Bash, Python, or low-code workflow tools).
• Demonstrated use of AI tools to accelerate your work.