Fractional IT Administrator

About TSC Security

TSC Security is a fractional security firm delivering complete security teams to venture-backed startups from seed through Series C. Our clients span SaaS, AI, and healthcare, and they rely on us for compliance and GRC, DevSecOps engineering, and vCISO leadership. We embed directly inside client environments, joining their Slack workspaces and customer calls as a true extension of their team.

We are a small, high-trust team operating at the intersection of security rigor and startup speed. This role reflects that: you will support our internal operations and extend that same IT support to select clients.

Role Overview

We are looking for a hands-on IT Administrator who thrives in a Mac-first environment, understands the nuance of supporting both macOS and Windows users, and has practical experience managing endpoints and identities through modern cloud tooling. This is not a purely ticket-queue role. You will work closely with the TSC leadership team and embedded directly with clients to solve real problems, build scalable IT processes, and ensure devices and identities are secure and compliant from day one.

You will be a key part of how TSC delivers security-conscious IT support to fast-moving startups that may not have dedicated IT staff of their own.

What You Will Do

Endpoint Management

•      Manage and maintain macOS devices as the primary platform, with solid support for Windows endpoints

•      Administer JumpCloud for MDM, device policies, patch management, and user lifecycle management

•      Configure and monitor SentinelOne EDR across client and internal endpoints, responding to alerts and tuning policies

•      Handle device provisioning, imaging, onboarding, and offboarding for internal staff and client employees

•      Maintain device compliance posture to support SOC 2, ISO 27001, and other framework requirements

Identity and Access Management

•      Administer Google Workspace including user provisioning, group management, Drive permissions, and audit logs

•      Manage SSO configurations and application integrations via JumpCloud, Okta, or similar IdP

•      Enforce MFA policies across all users and applications

•      Conduct periodic access reviews and support evidence collection for compliance audits

Client IT Support

•      Serve as a trusted IT resource for TSC clients, joining their Slack and responding to IT-related questions and issues

•      Help clients stand up IT infrastructure from scratch or mature existing tooling to meet security best practices

•      Produce client-facing runbooks, SOPs, and IT policy templates as needed

•      Collaborate with the vCISO, GRC, and DevSecOps team to align IT configurations with security and compliance objectives

Internal Operations

•      Own internal IT for the TSC team: hardware, software licensing, tooling configurations

•      Maintain documentation for all systems, configurations, and processes

•      Identify gaps and proactively recommend improvements to tools, processes, and security posture

•      Support incident response activities related to endpoint or identity events

What We Are Looking For

Required

•      3+ years of IT administration or IT support experience in a professional environment

•      Deep proficiency with macOS administration (this is a Mac-first role)

•      Solid working knowledge of Windows endpoints and common Windows administration tasks

•      Hands-on experience with JumpCloud for MDM, policies, and user management

•      Experience deploying and managing SentinelOne or a comparable EDR platform

•      Google Workspace administration including user management, audit logs, and Drive governance

•      Strong understanding of SSO, SAML, SCIM, and MFA configuration and enforcement

•      Comfortable working asynchronously in a remote-first, Slack-based environment

•      Clear written communication and the ability to explain technical topics to non-technical stakeholders

Nice to Have

•      Experience supporting clients in a managed service or fractional capacity

•      Familiarity with compliance frameworks such as SOC 2, ISO 27001, HIPAA, or FedRAMP

•      Exposure to AWS, GCP, or Azure administration

•      Experience with 1Password Teams or similar enterprise password management

•      Networking fundamentals: VLANs, VPNs, Meraki or similar cloud-managed networking

•      Scripting ability in Bash, Python, or PowerShell for automation and tooling

•      Okta administration or experience with a dedicated IdP beyond JumpCloud

•      Strong understanding of AI tooling such as Claude and ChatGPT

Working at TSC Security

TSC is a small, senior team that operates with a high degree of autonomy and trust. We do not have layers of process or overhead. You will be expected to own your work, communicate proactively, and bring solutions rather than just problems.

Our clients are startups that move fast and need a partner who can keep up. You will work across a variety of tech stacks, team sizes, and maturity levels. No two clients are exactly alike, and that variety is part of what makes this role interesting.

We value directness, craftsmanship, and a genuine interest in security. If you want to grow your understanding of the security landscape while doing meaningful IT work that directly impacts how startups operate and protect themselves, this is the role for you.