Information Technology Manager \ IT Lead

Ramat Gan | Hybrid day | Full timeRamat Gan | Hybrid day | Full time : What you'll do Own IT operations in a fully SaaS-based environment, including identity and access management. Support employees directly, mostly based in Israel: onboarding and offboarding, laptops and equipment, user accounts, permissions, licenses, and timely access revocation. Run and continuously improve our Microsoft stack: Microsoft 365, Entra ID, Exchange Online, Intune, Defender, MFA, Conditional Access, and related security policies. Manage Mac and Windows devices through Intune and Kandji.

Maintain and upgrade corporate connectivity, including VPN, Wi-Fi, and remote access. Partner with DevOps on AWS network and access topics such as VPCs, subnets, routing, security groups, and VPN connections. Work with our external consultant to keep SOC 2 and ISO 27001 on track: implementing IT controls, providing evidence, running access reviews, and supporting audits. Handle IT vendors and purchasing, hardware and software, license renewals, and cost efficiency.

Document systems, processes, infrastructure, and troubleshooting guides clearly and keep them up to date. At least 5 years of hands-on work in IT operations or IT infrastructure. Deep, practical knowledge of Microsoft 365, Entra ID, Intune, Defender, Exchange Online, Conditional Access, and MFA. Experience supporting both macOS and Windows, with hands-on Intune work and familiarity with Kandji.

A track record of connecting SaaS and cloud systems to SSO, using Auth0 or a similar identity platform. Solid networking skills: VPN, routing, DNS, DHCP, secure connectivity, and troubleshooting. Practical AWS networking experience, including VPCs, subnets, route tables, security groups, VPN connections, and cloud access concepts. Familiarity with SOC 2 or ISO 27001 processes from an IT perspective.

A good understanding of IT security basics: endpoint protection, access control, and secure IT practices. Good English, written and spoken. : Nice to have Background in cybersecurity, such as threat detection, incident response, vulnerability management, hardening, or cloud security Certifications such as AWS, Microsoft, CCNA, CISSP, CISM, CISA, or ISO 27001 .Scripting or automation skill