{"id":2768740,"url":"https://alion.io/job/medely-it-systems-administrator","title":"IT Systems Administrator","company":{"id":179532,"name":"Medely","domain":"medely.com","url":"https://alion.io/company/medely","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":null},"role":"DevOps","role_family":"DevOps","seniority":null,"employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":85000,"max":95000,"currency":"USD","period":"year","gross":null,"usd_annual":95000},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"Anthropic","optional":false},{"name":"Claude","optional":false},{"name":"Google Workspace","optional":false},{"name":"Human-in-the-Loop","optional":false},{"name":"Intercom","optional":false},{"name":"Jira","optional":false},{"name":"Least Privilege","optional":false},{"name":"LLM","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"n8n","optional":false},{"name":"Notion","optional":false},{"name":"Okta","optional":false},{"name":"OpenAI","optional":false},{"name":"Outlook","optional":false},{"name":"Rest API","optional":false},{"name":"Slack","optional":false},{"name":"SOC 2","optional":false},{"name":"Windows","optional":false},{"name":"Zapier","optional":false},{"name":"Zero Trust","optional":false},{"name":"JavaScript","optional":true},{"name":"Metabase","optional":true},{"name":"PowerShell","optional":true},{"name":"Python","optional":true},{"name":"Tableau","optional":true}],"status":"live","first_seen_at":"2026-10-17T03:20:13Z","employer_posted_date":"2026-10-17","last_verified_at":"2026-10-23T20:44:07Z","board_verified":true,"closed_at":null,"days_open":6,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":6},"description":"The Company\nMedely is a high-growth series-C technology start-up reimagining the future of healthcare work by providing an on-demand marketplace and workforce management tools. With the support of top-tier investors, Medely has quickly become a go-to platform for healthcare professionals to instantly access high-paying jobs with the freedom and flexibility to work when and where they want.\nAs a fully remote team of sharp, collaborative, and entrepreneurial individuals, we are dedicated to redefining the way healthcare workers and facilities work together to provide for patients. We are looking for passionate and skilled professionals to join our team and help us take on tough challenges in this fast-expanding healthcare industry segment.\nJoin us in our mission to transform the healthcare staffing industry and improve patient lives!\nThe Role\nMedely's IT team is small, high-leverage, and remote-first. We support a distributed workforce on a modern SaaS stack including, but not limited to, Okta, Google Workspace, Slack, Zoom and Zoom Phone, Notion, our ticketing platform (Medely Help), Iru MDM, Rippling, Ashby, Torii, and dozens of business apps. Day-to-day support volume is modest and well-documented; most of this role's time goes to building, securing, and automating the systems underneath.\nThis role is a hybrid: part hands-on IT generalist (the occasional password/MFA reset, break/fix, or machine swap, plus the employee lifecycle), part IT Systems Administrator (owner of identity, device, and SaaS architecture), and part automation architect (the person who turns repeated work into workflows, APIs, and safe AI-assisted processes), all with a security-first mindset.\nYou'll be the engineer who makes access control automatic, auditable, and least-privilege by default, and who makes IT's operational data clean enough to measure, report on, and automate against.\nWhy this role exists\nSupport is manageable, but it can be smarter. Truly hands-on IT work (a password reset here, a laptop replacement there) is light. The bigger opportunity is the repeatable stuff, like app access requests, which should be self-service, policy-driven, or fully automated.\n\nSaaS sprawl and shadow IT are real. Teams adopt tools quickly. We use Torii to discover and govern them, and we need someone to turn those findings into ownership, Okta-backed access, and renewal decisions.\n\nAccess control still has manual seams. Some apps are provisioned from Rippling instead of Okta, some support SCIM but aren't configured, shared service accounts need governance, and RBAC for Sales/RevOps and other departments needs to be operationalized end to end.\n\nThe lifecycle has timing and trigger gaps. Rippling → Okta activation timing, Ashby/Rippling → ticketing platform onboarding triggers, and offboarding audit trails all need durable, engineered workflows.\n\nDevice trust is maturing. Okta Device Trust with Iru on macOS and Windows is live and expanding; we've seen why enrollment controls (not just access controls) matter.\n\nAI adoption is accelerating. Claude, Notion AI and agents, and n8n are in use. We need someone who can enable them quickly and safely, with scoped access, data-sensitivity controls, and governance.\n\nWe have the platforms to automate. n8n (self-hosted), Okta Workflows, ticketing platform workflows/webhooks/API, and Notion databases are in place. We need someone who lives in them.\n\nWhat you'll own\nResponsibilities include, but are not limited to, the following:\n1) Identity & access management (Okta-first)\nOwn Okta as the control plane: SSO (SAML/OIDC), SCIM provisioning, group rules, profile/attribute mapping, authentication policies, MFA/FastPass, and admin role scoping\n\nDrive Okta to be the single source of provisioning for every eligible app; migrate remaining Rippling-provisioned apps and configure SCIM where supported but unused\n\nDesign and maintain RBAC by department, role, and seniority; publish and maintain access control matrices\n\nBuild birthright access, time-bound access (e.g., international travel), and automatic revocation\n\nGovern service and shared accounts: inventory, ownership, conversion to named accounts, credential rotation\n\nRun recurring access reviews and produce audit-ready evidence for SOC 2 and security reviews\n\nPartner with Security on zero-trust posture, device admission, geofencing, and Okta system log monitoring\n\n2) Automation, workflows & integrations\nDesign, build, and maintain automations in n8n, Okta Workflows, and our ticketing platform, connecting Okta, Rippling, Ashby, the ticketing platform, Slack, Google Workspace, Notion, and business apps\n\nUse REST APIs, webhooks, OAuth/API tokens, and JSON payloads confidently; read vendor API docs and build reliable integrations with error handling, retries, logging, and alerting\n\nAutomate the employee lifecycle end to end: pre-hire prep, staged Okta creation and timed activation, Day-1 access, role/department changes, and offboarding with access revocation and audit trail\n\nPartner closely with HR / People Ops on lifecycle management: agree on HRIS data standards and trigger timing, coordinate start dates, role changes, leaves, and terminations (including sensitive or same-day exits), and handle HR data with discretion\n\nTurn access requests into self-service catalog items with approval routing by app sensitivity (Slack approve/deny, owner approvals, automatic provisioning on approval)\n\nTreat automations as production systems: version control or exportable definitions, documentation, runbooks, credential hygiene, least-privilege service accounts, and ownership\n\n3) Device management (macOS & Windows)\nOur fleet is roughly 85% macOS and 15% Windows. Mac is the default, but Windows users get the same level of support, security, and polish.\nOwn MDM across macOS and Windows (Iru; experience with Kandji, Jamf, and/or Intune expected): enrollment (ABM/ADE, Autopilot), blueprints/profiles, compliance baselines, patching, app deployment, and FileVault/BitLocker\n\nMaintain and extend Okta Device Trust (device identity certificates, managed-device attestation, desktop and mobile auth policy rules)\n\nHarden enrollment controls so factors and devices can only be enrolled from managed, compliant hardware\n\nOwn hardware lifecycle tooling and data: assignment, shipping, recovery, resale/disposal, and reconciliation with Finance\n\n4) IT operations & service excellence\nServe as frontline support for Medely Help (our ticketing platform): identity, device, SaaS, and cross-system issues\n\nHandle the occasional hands-on fix with care: password/MFA resets with proper identity verification, break/fix troubleshooting, and remote machine replacement (ship, wipe, re-enroll, recover)\n\nOwn ticketing platform configuration: request catalog, forms, routing, categories, SLAs, inbox boundaries (privacy-aware for HR/sensitive queues), and AI triage behavior\n\nMaintain a strong Helpdesk Knowledge Base and IT internal runbooks in Notion\n\nHelp build sustainable IT operating rhythms: roadmap hygiene, weekly status, ownership on every card, and visible deadlines\n\n5) Zoom & Zoom Phone administration\nOwn Zoom Workplace administration: Okta SSO and SCIM provisioning, license types and assignment, roles, groups, account- and group-level settings and locks, and add-on management\n\nManage meeting and recording policy: cloud recording settings, retention, sharing defaults, and access controls aligned with Security and Legal\n\nGovern Zoom AI Companion and other AI features: who has them, what's enabled, and how summaries and recordings are stored and shared\n\nAdminister Zoom Phone end to end: number inventory and assignment, porting, call queues, auto receptionists/IVR, business hours and holiday routing, voicemail, and call handling for operational teams\n\nOwn Zoom Phone compliance and reliability: emergency (E911) addresses, call recording policies and notices, SMS/10DLC registration, and call quality troubleshooting\n\nBuild Zoom and Zoom Phone into the employee lifecycle: automatic license and number assignment on hire, call queue and routing updates on role changes, and number reclamation, recording handoff, and license recovery on offboarding\n\nTrack Zoom usage and licenses to right-size seats and Zoom Phone plans at renewal\n\n6) Safe AI enablement\nEnable AI tools (Claude, Notion AI/agents, and new entrants) through Okta SSO/SCIM, group-based entitlements, usage controls, and approval workflows\n\nBuild AI-assisted IT workflows (ticket triage, KB drafting, access request intake, reporting) with human-in-the-loop checkpoints where risk warrants\n\nDesign, build, and maintain governed AI integrations using LLM APIs (Anthropic/OpenAI), MCP connectors, and AI agents (including Notion agents and n8n AI nodes), with scoped credentials, data boundaries, logging, and clear ownership\n\nPut safeguards in place for every employee using AI tools: approved-tool list, data classification guidance (what never goes into a prompt: PII, PHI, credentials, customer data), connector and integration scoping, admin settings like data retention and training opt-outs, and audit logging\n\nMake safe use the easy path: short, practical guidance and training in Notion, a clear request path for new AI tools, and fast reviews so people don't route around IT\n\nPartner with Security and Legal on AI acceptable-use policy, vendor reviews, and periodic checks of how AI tools are actually being used\n\n7) SaaS governance & shadow IT (Torii)\nOwn Torii as the system for SaaS discovery: find unsanctioned apps, OAuth grants, and browser-extension sign-ups, and triage them (approve and bring under Okta, replace with a sanctioned tool, or shut down)\n\nAssign a business owner to every app and keep the SaaS inventory current\n\nUse Torii usage for automated license reclamation and consolidation\n\nBuild automations off Torii signals (new app detected, unused licenses, upcoming renewals) into the ticketing platform, Slack, and Notion\n\n8) Security operations mindset\nApply least privilege and zero-trust principles to every system you touch, including your own admin access and automation service accounts\n\nMonitor Okta System Log and admin activity; investigate suspicious sign-ins, unexpected factor enrollments, and policy failures with Security\n\nKeep secrets out of tickets, Slack, and workflows; use 1Password and scoped API tokens, and rotate credentials\n\nAdminister 1Password: Okta-integrated provisioning, vaults and shared-vault structure by team, groups and permissions, policies, recovery and reporting\n\nSupport incident response: document, contain, and run post-incident follow-ups that close the underlying control gap\n\nHelp with security awareness for employees (phishing, MFA hygiene, device hygiene) and support Security on SOC 2 controls and evidence\n\n9) Systems & data architecture\nDesign clean, relational IT data in Notion (and connected sources): SaaS inventory and status, app ownership, access matrices, asset inventory, roadmap, and ticket insights\n\nDefine sources of truth and sync patterns between HRIS (Rippling), identity (Okta), ticketing platform, and Notion so reporting is accurate and automatable\n\nBuild dashboards and metrics: ticket volume and categories, time to resolve, provisioning coverage, SCIM coverage, device compliance, license utilization, and SaaS spend\n\nSupport SaaS audits, renewals, and license reclamation with real usage data\n\n10) Notion platform ownership\nAdminister Notion as a core company platform: teamspaces, permissions and sharing patterns, SCIM/SSO, databases, forms, automations, and AI agents\n\nHelp departments build in Notion without oversharing or shadow IT; set standards and templates\n\nWhat success looks like\nFirst 90 days\nFully onboarded on Okta, Iru, the ticketing platform, n8n, and Notion admin; owns a defined set of IT Roadmap workstreams with weekly deadlines met\n\nDelivers a provisioning gap report: every app's SSO / SCIM / provisioning source / shared-account status, with a remediation plan\n\nShips at lea...","description_format":"text","description_chars":20329,"description_truncated":true,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"Polish","level":"All levels","optional":false}]},"benefits":["401k plan","Parental leave","Unlimited PTO","Vision insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Recruiting & Staffing","Healthcare Staffing"],"lifecycle":[{"event":"open","at":"2026-10-17T05:23:13Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":6,"expected_fill_days":19,"reasons":["conf:3","win:early"],"computed_at":"2026-10-23T05:54:15Z"},"pay":{"stated_usd_annual":95000,"is_top_pay":false},"html_url":"https://alion.io/job/medely-it-systems-administrator","json_url":"https://alion.io/job/medely-it-systems-administrator.json","meta":{"generated_at":"2026-10-23T22:11:34Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4805,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-24T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":179532},"rest":"https://alion.io/mcp/rest/get_company?id=179532"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmedely-it-systems-administrator"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmedely-it-systems-administrator"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmedely-it-systems-administrator"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/medely-it-systems-administrator\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmedely-it-systems-administrator"}]}