IT Engineer

About the Company We are a renewable energy and ocean technology company committed to rapidly developing and deploying technologies that will ensure a sustainable future for Earth by unlocking the vast energy potential of its oceans. Our focus is on capturing civilizational levels of ultra-low-cost renewable energy for applications including computing and affordable renewable fuels delivered to shore. The company is a public benefit corporation headquartered in Portland, Oregon, and backed by leading venture capitalists, philanthropic investors, university endowments, and private investment offices. We operate as an idea meritocracy in which the best ideas change the company’s direction on a regular basis. About the Job We’re looking for an IT Engineer to join our growing IT team. This is a hands-on, high-ownership role sitting alongside our IT Support function. You’ll be both a builder and a doer. You’ll architect and drive the systems that underpin how our team works, while staying deeply connected to the day-to-day realities of on-site infrastructure. We’re looking for a self-starter to lead our major IT initiatives that will enable the company to grow and scale gracefully. This work includes zero-touch deployment for Windows and macOS, BYOD support for mobile devices, context-aware device access policies, and implementing controls to facilitate compliance with an established security framework. You’ll also serve as an escalation point and mentor for our team of IT Support Specialists, and act as a subject matter expect in our physical office technology — from access control to printers to patch panels. This is an on-site role in our Portland office. You should be comfortable operating at multiple levels: one day you’re writing configuration profiles to automate workstation security, the next you’re installing A/V equipment and running patch cables. What You'll Do Endpoint Management & Zero Touch Deployment Administer our MDM platforms (Microsoft Intune, Jumpcloud) for Windows and macOS devices, including enrollment, configuration profiles, compliance policies, and application delivery Architect and execute our zero touch provisioning rollout (Windows Autopilot and Apple Business Manager/Automatic Device Enrollment), eliminating manual imaging for new device deployments Audit device enrollment and ensure 100% compliance across all devices in our MDM platforms Design and implement BYOD policies and enrollment workflows, enabling secure access from personal devices Identity & Access Management Administer Microsoft Entra ID, including user lifecycle, group management, dynamic membership rules, and Conditional Access policies Implement and refine context-aware access controls — tying device compliance posture, identity signals, and location to resource access Manage SSO integrations and application provisioning via SCIM and SAML across our SaaS stack Help implement our zero trust roadmap and translate policy into enforceable technical controls On-Site & Physical Infrastructure Own day-to-day operation and expansion of our physical office technology: building access control systems, badge readers, and door hardware Deploy, configure, and maintain printers and print management infrastructure across office locations Manage physical network infrastructure including switch configuration, cable patching, and troubleshooting wired and wireless connectivity issues Participate in office build-outs and capital projects, coordinating physical IT infrastructure for new or renovated spaces Partner with facilities and vendors on A/V systems, conference room technology, and infrastructure projects Security & Compliance Support adoption of a compliance framework (e.g., NIST or equivalent), translating requirements into concrete IT controls and documentation Develop and enforce endpoint security baselines, patch management cadences, and device health policies Collaborate with leadership to draft and operationalize infosec policies, including acceptable use, access control, and incident response procedures Monitor and respond to endpoint telemetry and security alerts, working with relevant stakeholders on remediation Help Desk Escalation & Team Mentorship Serve as the primary escalation point for our IT Support Specialist on complex technical issues across hardware, software, and identity Provide mentorship, guidance, and structured knowledge transfer to grow the support team’s capabilities Review and improve ticketing workflows, documentation standards, and knowledge base content in Confluence and Jira Service Management Set technical direction for scalable support processes that can grow with the team Required Qualifications Experience administering endpoint management for mixed Windows/macOS environments (MDM, device compliance, app deployment) Experience managing identity and access in a modern IdP (user lifecycle, group policy, conditional/context-aware access) Practical networking and on-site IT skills (switching/Wi-Fi basics, cabling/patching, troubleshooting in a real office) Ability to write clear documentation and turn policies into concrete, enforceable technical controls Comfort working across abstraction layers—designing systems one day, swapping hardware the next Desired Qualifications Experience administering a modern MDM solution, such as InTune, Jamf, JumpCloud, Inu, etc. Experience administering a modern IdP solution, such as Microsoft Entra ID, Okta, or Google Workspace Experience implementing SSO and provisioning integrations (SAML, SCIM) across SaaS tools Familiarity with zero trust concepts and how they translate into endpoint and identity controls Experience supporting or implementing a security/compliance framework (NIST, ISO 27001, SOC 2, or equivalent) Experience with endpoint telemetry and responding to security alerts (triage, remediation, root cause) Experience owning access con