Lead IT Engineer, Support

About Our IT Team

IT at FSAI keeps every employee's tools, access, and devices working so the rest of the business can move fast. We're growing from roughly 440 to around 700 people, distributed globally, and this role scales with that growth. We're also in the middle of bringing IT fully in-house: taking over day-to-day operations from an outsourced MSP, standing up our own tool stack and building a real global equipment program.

About the Role

We're hiring a Lead IT Engineer, Support to own identity, access, and security operations as FSAI takes IT fully in-house. This role will involve taking over administration and management responsibility currently held by our outsourced provider, standing up the tools and governance that don't exist today, and setting the technical standard the rest of the team builds on. You report directly to the Head of IT, and you work closely with an IT Engineer, Support who owns endpoint, device, and network operations, so between the two of you, the full stack is covered.

This is a hands-on build role, not a pure architecture or oversight position. You're standing up real systems yourself in the first several months.

Responsibilities

Identity & Access Administration

• Own Entra ID, SSO, and access governance end to end

• Lead the reconciliation of employee, contractor, and service accounts across Entra ID, our HRIS, and our contractor platform, closing gaps on stale, orphaned, or unauthorized access

• Build and maintain FSAI's identity and access inventory (systems, owners, user/admin counts, SSO/MFA/SCIM coverage) and run it on a quarterly access review cadence

• Own the privileged access review process for admin roles, taking that responsibility fully in-house from our outsourced provider

• Publish and enforce an SSO/MFA coverage standard across all critical business applications

• Select and roll out an Identity Governance & Administration (IGA) tool (net-new purchase, currently unselected)

Security Operations / Managed Detection & Response

• Own the transition of our outsourced provider's SOC coverage (Managed EDR, Managed ITDR, Managed SIEM) into an internally owned security operations capability. CrowdStrike (Falcon) is confirmed as our EDR platform, deployment and logging rollout are still in progress, this is the single highest-risk handover in the transition, since the outsourced provider currently holds Global Admin here

• Partner with the Security team and Head of IT on tool selection and coverage continuity during the transition

Governance, Risk & Compliance

• Provide input to FSAI's core IT policy set (acceptable use, access control, device management, vendor review, incident response) with Security and Legal

• Own the evidence tracker mapping IT-owned controls to system owners, supporting our SOC 2, ISO 27001, and GDPR audit readiness

• Partner with Security and Legal on the due diligence process for new vendors and AI tooling, from intake through security review to contract

• Contribute to ratifying FSAI's IT operating model, RACI, and escalation paths as we formalize how the team runs

Documentation & Process

• Build the runbooks, documentation, and escalation model the team will run on once the outsourced provider steps back

• Rebuild the institutional knowledge currently held outside the company

Cross-Department Partnership

• Act as IT's standing partner to each business function, proactively improving how teams work with technology, not just closing tickets

• Provide hands-on support alongside teams, not from behind a queue

Vendor & Tool Ownership

• Own the transition's core tool stack in partnership with the Head of IT: MDM (FleetDM is the leading candidate, final platform selection in progress), Freshdesk (ticketing/help desk, confirmed), remote access/RMM (TeamViewer One vs. NinjaOne, tool decision still being finalized), and 1Password (password manager, migration off our current tool in progress)

Required Qualifications

• 5+ years in IT or systems administration, including identity- or security-adjacent work

• Hands-on Microsoft 365 and Entra ID administration experience

• Experience reconciling identity data across multiple systems (HRIS, contractor platforms, directory services) to close access and offboarding gaps

• Familiarity with SOC/EDR/SIEM concepts and vendor management, even if you haven't operated these tools hands-on day to day

• Experience building documentation, runbooks, or operational process from scratch

• Strong experience partnering with non-IT stakeholders and business functions

Preferred Qualifications

• Experience standing up an internal IT function previously run by an outsourced MSP

• Identity Governance & Administration (IGA) tool selection or implementation experience

• Experience scaling IT for a company growing from a few hundred to 700+ employees

• Scripting or automation experience (PowerShell, Python) to reduce manual IT work

• CISSP, CISM, Security+, or an identity-platform certification (Microsoft Entra, Okta, SailPoint, or similar)

• Experience supporting SOC 2, ISO 27001, or GDPR audit cycles, including evidence collection and control ownership