About this role
About the IT Team
IT at Narmi is a small, high-impact function that keeps our people productive and our systems secure. As a fintech serving banks and credit unions, the way we manage devices, identity, and access is part of the trust our customers place in us. We're looking for a Senior IT Engineer to own and scale the systems that make that possible, starting with Jamf and Google Workspace. You'll have real influence on how IT runs at Narmi: which tools we adopt, how we automate the employee lifecycle, and how we meet the security and compliance expectations of the financial institutions we serve. Being a self-starter who sees what needs fixing and fixes it at the root is what makes people successful here.
What you'll do
- Own Narmi's Apple fleet end to end in Jamf Pro: enrollment, configuration profiles, policies, Smart Groups, patching, app deployment, and compliance reporting.
- Administer Google Workspace as our core productivity and identity platform, including organizational units, groups, sharing and security policies, and Google Vault.
- Build and maintain identity and access controls across our SaaS stack, including SSO, SCIM provisioning, and MFA enforcement.
- Automate the employee lifecycle so onboarding, role changes, and offboarding are fast, consistent, and auditable.
- Write scripts and integrations (Bash, Python, GAM, Jamf API) that remove manual work and fix recurring issues at the root.
- Partner with Security and Compliance on SOC 2 and customer audit requests by producing evidence, hardening endpoint baselines, and closing gaps.
- Serve as the escalation point for complex IT issues and help shape how support is delivered across the company.
- Evaluate, roll out, and document new tools as Narmi grows.
###
What you'll bring
- 5+ years of relevant, post-college IT or systems engineering experience
- Expert-level Jamf Pro experience managing a macOS fleet, including policies, configuration profiles, Smart Groups, extension attributes, and zero-touch deployment through Apple Business Manager
- Deep hands-on experience administering Google Workspace, including identity, security settings, groups, and data governance
- Experience with SSO and identity providers (Okta, Google, or similar), SCIM provisioning, and MFA
- Scripting proficiency in Bash, Python, or similar, and comfort working with APIs to automate workflows
- Ability to explain technical concepts with clarity and simplicity, whether to an engineer or an executive
- A strong sense of ownership and an eagerness to build systems that scale with the company
- Based in New York City or willing to relocate
- Authorized to work in the United States
###
Nice to have
- Jamf certifications (Jamf 300 or Jamf 400 / Certified Expert)
- Experience supporting SOC 2, PCI DSS, or similar audits
- Familiarity with AWS, especially IAM and account administration
- Experience with Jamf Connect, Jamf Protect, or other endpoint security tooling
- Background in fintech, financial services, or another regulated industry
- Experience building IT functions at a high-growth startup
## Compensation
The base pay range for this role is $130,000 – $175,000 per year.
