Group It Manager Jobs (NOW HIRING)

This role is hybrid, with four days per week in our San Francisco FiDi office.

About the role

We are hiring an IT Manager to lead Altruist's Information Technology function. This is the senior-most IT role at the company - you will own identity management, device lifecycle, helpdesk operations, audit compliance, vendor relationships, and a team of engineers across four offices. You report directly to the Sr. Director of Engineering and are a peer to Engineering Managers across the organization.

This is not a traditional IT management role. Altruist treats IT as an engineering discipline - with roadmaps, OKRs, architecture decisions, and a real career ladder. You will write Okta Workflows, build n8n automations, sit in audit evidence reviews, and also hire, develop, and run 1:1s with your team. The best candidate leads with technical credibility and manages with clarity.

What sets this role apart

This is not a ticket-driven management role. As IT Manager at Altruist, we expect you to:

• Own the function, not a workstream. Identity management, device lifecycle, helpdesk, audit compliance, vendor relationships, and infrastructure projects - all of it is yours to shape.
• Lead an AI-native IT operation. We have an automation layer in production and an AI helpdesk agent in development. You extend this roadmap, you don't inherit it passively.
• Build the team. You will manage 2-3 engineers today and hire more. Your fingerprints will be on who joins, how they grow, and what the IT function looks like in three years.
• Partner with Engineering. IT at Altruist is embedded in the Engineering org. You will work closely with Cloud Infrastructure, Security, and Platform teams - not in a silo.
• Be the technical authority. When there's a question about Okta architecture, VPN design, or MDM strategy - the answer comes from you.

What you'll do

• Identity & Access Management
• Own Okta as the company's identity platform - administer SSO/SCIM integrations across all applications, manage group lifecycle, and build Okta Workflows that automate provisioning and reduce manual review burden.
• Lead the completion of the Active Directory to Okta migration, closing security gaps in AWS and Microsoft AD environments.
• Own the Enterprise VPN migration from OpenVPN + AWS credentials to an Okta IDP-integrated solution.
• Partner with Security on YubiKey program completion, Okta Verify sunset, and endpoint vulnerability SLAs.
• AI & Automation
• Own and extend the IT automation roadmap - Okta Workflows, n8n, Google Apps Script, and Claude Code - with the goal of automating every repeatable process before considering a headcount addition.
• Ship the T1/T2 helpdesk AI agent currently in development - designed to handle Okta app access and password resets autonomously.
• Complete the audit evidence AI agent pilot, targeting 60% reduction in manual SOC 2 and ITGC evidence collection work.
• Device & Hardware Operations
• Own the MDM/RMM environment using Kaseya VSA - device enrollment, EOL replacement cadence, vulnerability patching, and remote management.
• Ship Zero Touch Deployment - enabling drop-ship provisioning of pre-configured laptops to all offices and remote employees.
• Manage hardware procurement through CDW, maintain asset inventory in Asset Panda, and own the device lifecycle end-to-end.
• Helpdesk & Employee Experience
• Own helpdesk operations across all four offices - JSM queue configuration, SLA targets, escalation paths, and routing.
• Own new hire onboarding and offboarding end-to-end: Okta provisioning, device setup and shipping, orientation, and access lifecycle.
• Support Corp RIA Beta IT operations - provisioning and IT support for incoming Altruist Advisors (15-50 advisors expected in H2 2026).
• Audit, Compliance & Security
• Own IT's role in SOC 2 and ITGC audits - evidence collection, UAR execution, BDO relationship, and readiness through the full audit cycle.
• Partner with the Security team on endpoint monitoring, EDR tooling, KnowBe4 administration, and security awareness compliance.
• Drive toward automated evidence collection - the audit evidence agent pilot is the first step.
• Team & Vendor Leadership
• Manage and develop a team of 2-3 IT engineers across Culver City, Dallas, and San Francisco - run 1:1s, set growth paths, and establish team culture.
• Own all IT vendor relationships - CDW, Kaseya, Asset Panda, JetBrains, KnowBe4, DocuSign, FIS, Tropic, and others - negotiating proactively, not at renewal deadlines.
• Partner cross-functionally with Cloud Infrastructure, Security, and Platform engineering teams on shared infrastructure and compliance work.

Required qualifications

• 4+ years of progressive IT experience, including at least 1 year in a management or senior technical lead role in a fast-paced tech or fintech environment.
• Okta/Auth0 administration at scale - SSO/SCIM integrations, Okta Workflows, lifecycle automation, and group management. Non-negotiable.
• MDM proficiency with Kaseya VSA, Jamf, or Intune - device enrollment, remote management, and policy enforcement.
• Networking fundamentals: VLANs, VPN configuration, TCP/IP, Meraki or equivalent - comfortable owning office network health across multiple locations.
• People management: has led a small team, managed performance, built onboarding plans, and made hiring decisions.
• Excellent communication - you can explain a security architecture decision to a non-technical executive and a detailed Okta workflow to a junior engineer.

Preferred qualifications

• Experience with AI-native IT tooling - Okta Workflows, n8n, Glean, or agentic AI platforms applied to real operational problems in a production environment.
• AWS familiarity - IAM, SSO, VPN - you don't need to be a cloud engineer but you navigate it confidently.
• Experience at a regulated financial services company: broker-dealer, RIA, or fintech. SOC 2, ITGC, and UAR are familiar territory.
• Hands-on experience with Active Directory migration to Okta LDAP.
• Experience with Zero Touch Deployment or equivalent MDM-based provisioning automation.
• Familiarity with Jira Service Management for helpdesk configuration and reporting.
• AWS CCP or equivalent certification, or active pursuit of one.
• Automation experience: Bash, Python, PowerShell, Google Apps Script, n8n, or equivalent. You build solutions, not workarounds.
• SOC 2 or ITGC audit experience - has owned evidence collection and UAR execution, not just contributed.