IT Engineer

About the Company

We are a renewable energy and ocean technology company committed to rapidly developing and deploying technologies that will ensure a sustainable future for Earth by unlocking the vast energy potential of its oceans. Our focus is on capturing civilizational levels of ultra-low-cost renewable energy for applications including computing and affordable renewable fuels delivered to shore.

The company is a public benefit corporation headquartered in Portland, Oregon and backed by leading venture capitalists, philanthropic investors, university endowments, and private investment offices. We operate as an idea meritocracy in which the best ideas change the company’s direction on a regular basis.

Our staff have worked at organizations such as SpaceX, Blue Origin, Boeing, Tesla, Apple, Virgin Orbit, Astra, Google, Amazon, Microsoft, New Relic, Bridgewater, Raytheon, Disney Imagineering, and the US Army and Air Force, as well as research universities, startups, and small companies across a range of industries.

About the Job

We’re looking for an IT Engineer to join our growing IT team. This is a hands-on, high-ownership role sitting alongside our IT Support function. You’ll be both a builder and a doer. You’ll architect and drive the systems that underpin how our team works, while staying deeply connected to the day-to-day realities of on-site infrastructure.

We’re looking for a self-starter to lead our major IT initiatives that will enable the company to grow and scale gracefully. This work includes zero-touch deployment for Windows and macOS, BYOD support for mobile devices, context-aware device access policies, and implementing controls to facilitate compliance with an established security framework. You’ll also serve as an escalation point and mentor for our team of IT Support Specialists, and act as a subject matter expert in our physical office technology - from access control to printers to patch panels.

This is an on-site role in our Portland office. You should be comfortable operating at multiple levels: one day you’re writing configuration profiles to automate workstation security, the next you’re installing A/V equipment and running patch cables.

What You'll Do

Endpoint Management & Zero Touch Deployment

• Administer our MDM platforms (Microsoft InTune, JumpCloud) for Windows and macOS devices, including enrollment, configuration profiles, compliance policies, and application delivery
• Architect and execute our zero touch provisioning rollout (Windows Autopilot and Apple Business Manager/Automatic Device Enrollment), eliminating manual imaging for new device deployments
• Audit device enrollment and ensure 100% compliance across all devices in our MDM platforms
• Design and implement BYOD policies and enrollment workflows, enabling secure access from personal devices

Identity & Access Management

• Administer Microsoft Entra ID, including user lifecycle, group management, dynamic membership rules, and Conditional Access policies
• Implement and refine context-aware access controls - tying device compliance posture, identity signals, and location to resource access
• Manage SSO integrations and application provisioning via SCIM and SAML across our SaaS stack
• Help implement our zero trust roadmap and translate policy into enforceable technical controls

On-Site & Physical Infrastructure

• Own day-to-day operation and expansion of our physical office technology: building access control systems, badge readers, and door hardware
• Deploy, configure, and maintain printers and print management infrastructure across office locations
• Manage physical network infrastructure including switch configuration, cable patching, and troubleshooting wired and wireless connectivity issues
• Participate in office build-outs and capital projects, coordinating physical IT infrastructure for new or renovated spaces
• Partner with facilities and vendors on A/V systems, conference room technology, and infrastructure projects

Security & Compliance

• Support adoption of a compliance framework (e.g., NIST or equivalent), translating requirements into concrete IT controls and documentation
• Develop and enforce endpoint security baselines, patch management cadences, and device health policies
• Collaborate with leadership to draft and operationalize infosec policies, including acceptable use, access control, and incident response procedures
• Monitor and respond to endpoint telemetry and security alerts, working with relevant stakeholders on remediation

Help Desk Escalation & Team Mentorship

• Serve as the primary escalation point for our IT Support Specialist on complex technical issues across hardware, software, and identity
• Provide mentorship, guidance, and structured knowledge transfer to grow the support team’s capabilities
• Review and improve ticketing workflows, documentation standards, and knowledge base content in Confluence and Jira Service Management
• Set technical direction for scalable support processes that can grow with the team

Required Qualifications

• Experience administering endpoint management for mixed Windows/macOS environments (MDM, device compliance, app deployment)
• Experience managing identity and access in a modern IdP (user lifecycle, group policy, conditional/context-aware access)
• Practical networking and on-site IT skills (switching/Wi-Fi basics, cabling/patching, troubleshooting in a real office)
• Ability to write clear documentation and turn policies into concrete, enforceable technical controls
• Comfort working across abstraction layers-designing systems one day, swapping hardware the next

Desired Qualifications

• Experience administering a modern MDM solution, such as InTune, Jamf, JumpCloud, Inu, etc.
• Experience administering a modern IdP solution, such as Microsoft Entra ID, Okta, or Google Workspace
• Experience implementing SSO and provisioning integrations (SAML, SCIM) across SaaS tools
• Familiarity with zero trust concepts and how they translate into endpoint and identity controls
• Experience supporting or implementing a security/compliance framework (NIST, ISO 27001, SOC 2, or equivalent)
• Experience with endpoint telemetry and responding to security alerts (triage, remediation, root cause)
• Experience owning access control systems, conference room/AV setups, and vendor coordination for office IT projects

Compensation and Benefits

If hired for this full-time role, you will receive:

• Cash compensation of $120,000 - $160,000
• Equity in the company. We’re all owners and if we’re successful, this equity should be far and away the most valuable component of your compensation.
• A benefits package that helps you take care of yourself and your family, including:
  • Flexible paid time off
  • Health insurance (the company pays 100% of gold level PPO plan for full time employees, their partners, and dependents)
  • Dental insurance (the company pays 100% for full time employees and 100% for their partners and dependents)
  • Vision insurance (the company pays 100% for full time employees, their partners, and dependents)
  • Disability insurance (the company pays 100% for a policy to provide long term financial support if you become disabled)
  • Ability to contribute to tax-advantaged accounts, including 401(k), health FSA, and dependent care FSA
• Relocation assistance to facilitate your move to Portland (if needed).

Location

This position is ideally based on-site at our offices in Portland, Oregon, though we are open to a hybrid/remote arrangement with quarterly visits to our Portland office.