IT & Security Manager

A well-established, highly profitable, and self-sustained Israeli Big Data technology company engineering complex, high-throughput enterprise data platforms for global markets.

Operating independently for over a decade without reliance on external institutional capital, the company demonstrates long-term financial resilience, consistent profitability, and an intimate, high-standard organizational culture.

The technological infrastructure bridges advanced multi-cloud networks, enterprise-grade identity systems, and rigorous security compliance frameworks.

The company provides complete technical autonomy, broad ownership over organizational IT and security operations, and direct collaboration with core engineering squads.

Located in the Central District directly adjacent to primary train transit, operating on a hybrid model with one day working from home.

Role Description

• Serving as the Sole IT Infrastructure & Enterprise Security Specialist, taking comprehensive, end-to-end technical ownership over company-wide IT operations, enterprise infrastructure, and workplace technologies.
• Managing day-to-day IT support, onboarding/offboarding workflows, and technical enablement for all employees, alongside strategic infrastructure enhancements and system modernization.
• Administrating and hardening the enterprise Microsoft ecosystem, including Microsoft 365, Entra ID, Intune, Defender, Exchange Online, Conditional Access, and multi-factor authentication (MFA).
• Managing a heterogeneous endpoint fleet spanning macOS and Windows, utilizing Microsoft Intune alongside Apple device management frameworks (Kandji).
• Leading enterprise Identity & Access Management (IAM) and single sign-on (SSO) integrations across diverse SaaS applications and cloud platforms using Auth0 or equivalent identity providers.
• Managing enterprise networking and secure connectivity across physical offices and remote endpoints, including VPNs, routing, DNS, DHCP, and secure tunnels.
• Partnering closely with the core DevOps squad to manage AWS networking components, encompassing VPC topologies, subnets, routing tables, security groups, cloud VPN connectivity, and perimeter controls (Note: this is a dedicated IT infrastructure role, not a DevOps engineering position).
• Leading and maintaining compliance standards, policy audits, and governance frameworks for SOC 2 Type II and ISO 27001.
• Driving ongoing corporate security controls, vendor risk assessments, vulnerability management, and endpoint detection and response (EDR).

Requirements-

• 5 years of proven hands-on professional experience in IT, IT Infrastructure, or Enterprise IT Operations – Mandatory
• Proven, demonstrated track record as a Sole IT Owner / Single Point of Contact managing enterprise IT infrastructure end-to-end – Mandatory
• Deep, authoritative hands-on expertise across the Microsoft 365 enterprise suite: Entra ID, Intune, Microsoft Defender for Endpoint, Exchange Online, Conditional Access policies, and MFA – Mandatory
• Proven hands-on proficiency managing both macOS and Windows environments, including deep experience with Intune and working familiarity with Kandji (or equivalent MDM) – Mandatory
• Solid experience orchestrating SaaS SSO integrations and Identity Platforms (Auth0 or equivalent IAM tools) – Mandatory
• Strong practical understanding of enterprise networking fundamentals: VPN configurations, routing, firewall rules, DNS, DHCP, and secure remote access – Mandatory
• Hands-on practical experience with AWS cloud networking fundamentals: VPCs, subnets, route tables, security groups, and cloud VPN gateways – Mandatory
• Proven track record implementing, maintaining, and auditing SOC 2 or ISO 27001 compliance standards – Mandatory
• Solid working knowledge of IT security best practices, endpoint protection, access controls, vendor risk management, and secure corporate operations – Mandatory
• Fluent, professional communication capabilities in English (written and verbal) – Mandatory