IT Security Specialist

The IT Support Specialist provides hands-on technical support, manages user

access and hardware, and ensures a secure, reliable IT environment. This role

supports both onsite Denver employees and distributed team members. Because

of hardware handling, office support, and onsite troubleshooting, this position

requires being onsite in Denver several days per week.

Key Responsibilities

End-User Support

Provide Tier 1-2 support for employees in the Denver office and remote team

members

Troubleshoot Microsoft 365 / Outlook

Troubleshoot Slack

Troubleshoot Zoom

Troubleshoot VPN and basic networking

Troubleshoot Mac and Windows device issues

Troubleshoot printers, monitors, docking stations, and peripherals

Manage and resolve helpdesk tickets in a timely, communicative manner

Systems Administration

Administer user accounts, access, and policies in Azure AD / Entra ID

Administer Microsoft 365 Admin Center

Administer Slack Admin

Administer Airbase (cards, reimbursements, approval routing)

Administer Salesforce (basic access, MFA, login troubleshooting)

Provide Active Directory management

Manage rights provisioning across systems and enforce least privilege access

Manage SSO across systems and troubleshoot authentication issues

Assist Internal Systems team in supporting system enhancements, integrations,

and rollouts

Cloud & Access Management

Support AWS account provisioning and management including access setup and

role assignments

Manage and document third-party SaaS access

Maintain access documentation and audit readiness related to user provisioning

and permissions

Hardware & Asset Management

Own end-to-end laptop lifecycle including ordering, imaging, Kandji enrollment,

configuration, shipping, and returns

Maintain accurate hardware and software inventory

Support onsite hardware troubleshooting, repairs, and replacements

Support scaled deployment efforts for devices, tools, and configurations

Security & Compliance

Manage device security and compliance using Kandji for device enrollment,

configuration profiles, patch management, and lost/stolen device controls

Manage Office/Intune compliance as applicable

Enforce security standards including disk encryption, MFA, OS updates, and

compliance automations

Assist with SOC 2 evidence gathering and maintaining related controls

Promote least-privilege and secure-by-default practices across systems

Respond as internal IT expert to customer security RFPs and security

questionnaires

Project & Collaboration

Work closely with Internal Systems, Engineering, and Finance

Support ongoing improvements and deployments across Salesforce, NetSuite,

Boomi, Airbase, and Avalara

Document recurring issues and propose automation or process improvements

where possible

Must-Haves

2-4+ years of IT support or helpdesk experience

Strong Mac and Windows support skills

Experience with Azure AD / Entra ID and Microsoft 365 administration

Hands-on experience with Kandji

Strong troubleshooting and communication skills

Ability to work onsite in Denver several days per week

Nice-to-Have

Slack admin experience

Basic Salesforce user support

PowerShell or bash scripting basics

Fundamental networking knowledge (DNS, VPN, Wi-Fi)

Experience with SOC 2 or similar compliance frameworks

Experience supporting scaled deployments and rollouts

Experience with SSO and identity lifecycle management best practices

Success Measures (First 90 Days)

Handles Tier 1-2 support independently and proactively

Owns onboarding/offboarding and keeps processes running smoothly

Maintains accurate asset inventory and consistent Kandji compliance

Understands core system relationships and escalation paths

Provides dependable, friendly, and efficient support to employees