Job description

TL;DR Kharon is seeking a full-time IT System Engineer based in Denver. This role requires in-office attendance at least 3 days a week. RESPONSIBILITIES: • Provide day-to-day support for staff and white glove support for C-Suite on macOS and Windows devices, both in the Denver office and remotely for staff across our globally distributed workforce. • Administer Jamf for macOS and Intune for Windows, including enrollment, configuration profiles, app deployment, patching, and asset inventory. • Manage Okta as the identity provider for our tech stack including, but not limited to, Atlassian (Jira and Confluence), Slack, 1Password, and other SaaS applications, and administer Tailscale for secure network access. • Build and maintain automated onboarding and offboarding using Okta Workflows, SCIM provisioning, and scripting, so accounts, access, and devices follow each employee's lifecycle with minimal manual steps. • Administer Cisco Meraki and UniFi hardware across office locations, and troubleshoot LAN, Wi-Fi, VPN, DNS, and DHCP issues. • Maintain disk encryption, patch compliance, EDR coverage, and device compliance policies in Jamf and Intune. • Run periodic access reviews, enforce least-privilege access and 1Password vault governance, and collect and maintain evidence for security audits such as SOC 2 or ISO 27001. • Serve as the on-site IT presence in our Denver headquarters, supporting the executive team and office systems including conference room AV and Wi-Fi, with occasional travel to support other offices. • Deliver IT projects in partnership with the IT Lead, document processes in Confluence, and train employees on IT best practices. QUALIFICATIONS: • At least 5 years of experience in IT support or systems administration, ideally in a multi-office or distributed company. • Strong macOS administration experience with Jamf, plus working knowledge of Windows device management with Intune. • Hands-on administration experience with Okta, Google Workspace, Atlassian (Jira and Confluence), Slack, and 1Password. • Experience with Tailscale or a similar zero-trust network access tool. • Solid understanding of networking concepts (TCP/IP, VLANs, DNS, DHCP, Wi-Fi, firewalls, VPN) and experience administering Cisco Meraki and UniFi hardware. • Scripting experience in Bash/zsh, Python, or AppsScript , with a track record of automating IT workflows. • Strong understanding of how to use AI tools to speed up scripting, documentation, and support workflows. • Experience supporting remote employees across time zones. • Experience running cable and setting up conference room AV and video conferencing equipment. • Familiarity with endpoint security, access reviews, and supporting security audits. • Jamf Certified Tech (Jamf 200) or Okta Certified Administrator certification preferred. • Experience with Okta Workflows, HRIS integrations, or Jira Service Management automation. • Experience building and refining IAM governance • Awareness of GDPR as it applies to employee devices and accounts in EU offices preferred. • Excellent communication skills and the ability to explain technical topics clearly to colleagues of all technical backgrounds. ABOUT KHARON: Kharon is a highly disruptive and incredibly innovative organization that navigates risk at the intersection of global security threats + international commerce. What does that mean? Great question. Operating at the nexus of global security, Kharon is on a mission to revolutionize the current landscape. We take really complex data as it relates to global security and empower our clients to not only understand the risk associated with their potential business relationships but to operationalize that data so that they can make the best and most informed decisions possible. From financial crimes and sanctions to export controls and threat identifications, our tools optimize protection against the types of risks that could otherwise be incredibly dangerous and excessively costly to any business. Serving many of today’s leading global financial and multinational institutions, Kharon products are the most powerful in the space with a precision and depth that is absolutely unparalleled. When you look at any major global crisis event, we’re providing intelligence that’s at the heart of those circumstances. We connect the dots in a way that’s meaningful. Now, we’re experiencing unprecedented growth. As the world continues to evolve in complexity, so too does the demand for our products. Given the significance of our work and the increasing global reliance on our insights, we are looking for a IT System Engineer to join us as we work to shape the way businesses perceive and navigate global risks. To the right person, this will be the perfect kind of challenge. Our mission is compelling, our product is powerful, and we’re growing at a rate that makes us unstoppable. If you’re looking to be surrounded by people who will inspire you to think and challenge you to grow then look no further. Our team is made up of some of the most visionary and uncompromising individuals you will ever encounter. We don’t take ourselves seriously but we’re serious about the work we do and there is absolutely no slowing us down. To keep that momentum going, we do our very best to make sure that each and every team member is completely taken care of. We’re nothing without our people and we strive to offer a package that reflects that. As a Kharon team member, you can expect: • Fully sponsored medical, dental, and vision insurances • FSA program for both medical and dependent care • Long term disability • 401k + Roth with matching and immediate vesting • Flexible paid time off + 11 paid holidays The base salary range at Kharon is set between $120,000 to $150,000. Please note that this figure does not necessarily include potential bonuses, commissions, benefits, or equity that may be part of the overall compensation package. If interested in pursuing this position, please visit www.kharon.com/careers to apply. Kharon is an equal opportunity employer. Kharon is committed to cultivating and maintaining a workplace that is free from harassment and discrimination. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, ethnicity, gender, gender identity or expression, sexual orientation or identity, neurodiversity, appearances, age, protected veteran status, or status as a qualified individual with disability. #LI-Hybrid #LI-AG1

Requirements

Must-haves

TL;DR Kharon is seeking a full-time IT System Engineer based in Denver. This role requires in-office attendance at least 3 days a week.
Provide day-to-day support for staff and white glove support for C-Suite on macOS and Windows devices, both in the Denver office and remotely for staff across our globally distributed workforce.
Administer Jamf for macOS and Intune for Windows, including enrollment, configuration profiles, app deployment, patching, and asset inventory.
Manage Okta as the identity provider for our tech stack including, but not limited to, Atlassian (Jira and Confluence), Slack, 1Password, and other SaaS applications, and administer Tailscale for secure network access.
Build and maintain automated onboarding and offboarding using Okta Workflows, SCIM provisioning, and scripting, so accounts, access, and devices follow each employee's lifecycle with minimal manual steps.
Administer Cisco Meraki and UniFi hardware across office locations, and troubleshoot LAN, Wi-Fi, VPN, DNS, and DHCP issues.
Maintain disk encryption, patch compliance, EDR coverage, and device compliance policies in Jamf and Intune.
Run periodic access reviews, enforce least-privilege access and 1Password vault governance, and collect and maintain evidence for security audits such as SOC 2 or ISO 27001.
Serve as the on-site IT presence in our Denver headquarters, supporting the executive team and office systems including conference room AV and Wi-Fi, with occasional travel to support other offices.
Deliver IT projects in partnership with the IT Lead, document processes in Confluence, and train employees on IT best practices.
At least 5 years of experience in IT support or systems administration, ideally in a multi-office or distributed company.
Strong macOS administration experience with Jamf, plus working knowledge of Windows device management with Intune.
Hands-on administration experience with Okta, Google Workspace, Atlassian (Jira and Confluence), Slack, and 1Password.
Experience with Tailscale or a similar zero-trust network access tool.
Solid understanding of networking concepts (TCP/IP, VLANs, DNS, DHCP, Wi-Fi, firewalls, VPN) and experience administering Cisco Meraki and UniFi hardware.
Scripting experience in Bash/zsh, Python, or AppsScript , with a track record of automating IT workflows.
Strong understanding of how to use AI tools to speed up scripting, documentation, and support workflows.
Experience supporting remote employees across time zones.
Experience running cable and setting up conference room AV and video conferencing equipment.
Familiarity with endpoint security, access reviews, and supporting security audits.
Experience with Okta Workflows, HRIS integrations, or Jira Service Management automation.
Experience building and refining IAM governance

Nice-to-haves

Jamf Certified Tech (Jamf 200) or Okta Certified Administrator certification preferred.
Awareness of GDPR as it applies to employee devices and accounts in EU offices preferred.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

jirapythonai

Platform: pinpoint
Effort: medium

Benefits

Benefits detected in the listing.

Dental

Vision

401k

Paid Time Off