{"id":3738265,"url":"https://alion.io/job/tradevest-it-administrator","title":"IT Administrator","company":{"id":2557483,"name":"Tradevest","domain":"tradevest.ai","url":"https://alion.io/company/tradevest","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Personio","truth_index":{"grade":"B","score":75,"open_postings":3,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-11-08T05:47:12Z"}},"role":"DevOps","role_family":"DevOps","seniority":null,"employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Warsaw, Poland"],"countries":["PL"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Bash","optional":false},{"name":"CIS Benchmarks","optional":false},{"name":"Dependabot","optional":false},{"name":"DHCP","optional":false},{"name":"DLP","optional":false},{"name":"DNS","optional":false},{"name":"GDPR","optional":false},{"name":"GitHub","optional":false},{"name":"Gmail","optional":false},{"name":"Google Workspace","optional":false},{"name":"ISO 27001","optional":false},{"name":"Jira","optional":false},{"name":"Least Privilege","optional":false},{"name":"PCI DSS","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false},{"name":"TCP/IP","optional":false},{"name":"VPN","optional":false},{"name":"Wazuh","optional":false},{"name":"Wi-Fi","optional":false},{"name":"Zero Trust","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"Cloudflare","optional":true},{"name":"GCP","optional":true},{"name":"IAM","optional":true},{"name":"Linux","optional":true},{"name":"Terraform","optional":true},{"name":"Windows","optional":true}],"status":"live","first_seen_at":"2026-11-03T17:10:35Z","employer_posted_date":"2026-11-03","last_verified_at":"2026-11-08T17:53:21Z","board_verified":true,"closed_at":null,"days_open":5,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":5},"description":"Tech stack you’ll work with\nAbout the role\nWe are hiring an IT Administrator to own our internal IT and security operations: endpoints, identity, aaccess, networking and core SaaS tools. You will keep every laptop, account and system secure, compliant and running smoothly, so our teams can build and operate financial products with confidence.You will be the go-to person for Google Workspace, Jamf, Jira, GitHub and our Wazuh SIEM, and you will work closely with engineering, security and compliance. In a regulated fintech environment, that means getting the details right: least-privilege access, auditable changes and fast response when something looks wrong.\nKey responsibilities\n Endpoint management (Jamf)Administer Jamf Pro for the full macOS (and iOS, where applicable) fleet: enrollment, zero-touch provisioning via Apple Business Manager, and offboarding.\nBuild and maintain configuration profiles, policies and smart groups for FileVault encryption, firewall, screen lock, Gatekeeper and OS update enforcement.\nDeploy and patch applications, and keep the fleet aligned with CIS benchmarks.\nManage hardware inventory, device lifecycle and remote lock or wipe for lost or compromised devices.\n Identity and access management (Google Workspace)Administer Google Workspace as the primary identity provider: users, groups, organizational units and SSO (SAML/OIDC) to connected apps.\nEnforce MFA (security keys or passkeys preferred), password policies, context-aware access and session controls.\nOwn joiner, mover and leaver processes, with access granted on least-privilege and role-based principles.\nRun periodic access reviews and keep auditable records of approvals and changes.\nConfigure Gmail security (SPF, DKIM, DMARC), DLP rules and Drive sharing restrictions.\nJira and GitHub administrationAdminister Jira: projects, workflows, permission schemes, user provisioning and integrations.\nAdminister the GitHub organization: teams, repository permissions, SSO enforcement, branch protection rules and required reviews.\nManage GitHub security features such as secret scanning, Dependabot and audit log monitoring, in partnership with engineering.\n Security monitoring (Wazuh SIEM)Operate and maintain Wazuh: agent deployment across endpoints and servers, rule tuning and log source onboarding (Google Workspace, GitHub, cloud and network logs).\nTriage alerts, investigate suspicious activity and escalate or handle incidents following our response runbooks.\nUse Wazuh for file integrity monitoring, vulnerability detection and compliance reporting.\n Network and VPNManage the corporate VPN or zero-trust network access solution, including client deployment, access policies and certificate management.\nMaintain office network infrastructure: Wi-Fi (WPA3-Enterprise), firewall rules, network segmentation and guest isolation.\n Security and complianceImplement and document security controls that support our compliance obligations (for example SOC 2, ISO 27001, PCI DSS, DORA and GDPR).\nCollect evidence for audits and help answer security questionnaires from partners and regulators.\nWrite and maintain IT policies, runbooks and system documentation.\nRun security awareness basics, such as phishing simulations and onboarding training.\n IT supportProvide day-to-day IT support to employees, and onboard new joiners with a ready-to-use, secure setup on day one.\nEvaluate, purchase and manage SaaS tools and licenses, keeping costs and shadow IT under control.\nRequired qualifications\n3+ years in IT administration or systems administration, ideally in a fast-growing or regulated company.\nHands-on experience administering Google Workspace, including SSO, MFA, groups and security settings.\nHands-on experience with Jamf Pro (or a comparable MDM) managing a macOS fleet.\nWorking knowledge of Jira and GitHub administration: permissions, SSO and user lifecycle.\nExperience with a SIEM (Wazuh strongly preferred) and basic incident triage.\nSolid networking fundamentals: TCP/IP, DNS, DHCP, VLANs, firewalls and VPN technologies.\nComfort with scripting for automation (Bash, Python or similar) and with APIs.\nA security-first mindset: least privilege, change control, documentation and audit trails.\nClear written communication and a helpful, service-oriented attitude.\nFluent English.\nNice to have\nExperience in fintech, banking or payments, and familiarity with SOC 2, ISO 27001, PCI DSS or DORA audits.\nExperience with zero-trust access tools (for example Tailscale, Cloudflare Zero Trust or similar).\nCloud fundamentals on AWS, GCP or Azure, especially IAM and logging.\nInfrastructure-as-code or configuration-as-code experience (Terraform, GAM, Jamf API).\nCertifications such as Jamf Certified Admin, Google Workspace Administrator, CompTIA Security+ or similar.\nSome Windows or Linux endpoint management experience.\nWhat we offer\nOwnership of IT and security operations, with real influence over tools and processes.\nClose collaboration with engineering, security and compliance teams.\n[Salary range, contract type (B2B or employment contract) and equity, if applicable]\nWork model: hybrid in Warsaw\nBenefits: sports card (Multisport)","description_format":"text","description_chars":5148,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":["Equity"],"hiring_locations":[{"name":"Poland","iso":"PL","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Online Brokerage & Trading Platforms"],"lifecycle":[{"event":"open","at":"2026-11-04T10:44:04Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.857,"p_room":1,"age_days":4,"expected_fill_days":25,"reasons":["conf:0","win:early"],"computed_at":"2026-11-08T05:47:12Z"},"pay":null,"html_url":"https://alion.io/job/tradevest-it-administrator","json_url":"https://alion.io/job/tradevest-it-administrator.json","meta":{"generated_at":"2026-11-08T20:35:00Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":43012,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-09T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2557483},"rest":"https://alion.io/mcp/rest/get_company?id=2557483"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ftradevest-it-administrator"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ftradevest-it-administrator"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ftradevest-it-administrator"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/tradevest-it-administrator\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ftradevest-it-administrator"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3738265}},{"tool":"search_jobs","arguments":{"company":"tradevest.ai","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3738265},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}